last executing test programs: 37.690148522s ago: executing program 2 (id=275): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f00000010c0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000840)='.\x00', 0x80000, 0x103) getdents(r1, &(0x7f0000000880)=""/197, 0xc5) 37.433501978s ago: executing program 2 (id=279): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f0000000240)='}', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=':', 0x1}], 0x1}}], 0x1, 0x80) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$sock(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f}}, 0x20) sendto$inet(r0, &(0x7f0000000ac0)="ab", 0x34000, 0x0, &(0x7f0000000b00)={0x2, 0x4e22, @local}, 0x10) 36.903111623s ago: executing program 2 (id=283): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x40000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x75b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 36.268034117s ago: executing program 4 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x81, 0x2, 0x17e, 0x3, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x200, 0xfffffffffffffffe, 0xf48, 0x9, 0xfffffffffffefffa], 0xe002}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x40000, 0x8, 0x8, 0xff, 0xe6, 0x40, 0x0, 0x4, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x6, 0x6, 0x6, 0x36, 0xe, 0x2, 0x87}, {0xdddd0000, 0xdddd0000, 0x4, 0x3, 0x3, 0x6, 0xfc, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x4, 0xeeee0000, 0x8, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0xb, 0xe}, {0xf000, 0x8000000, 0xf, 0x3, 0x16, 0x1, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xd, 0xa0, 0xb4, 0x8, 0x4, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x10000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x8, 0x81, 0x7f, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x0, 0x9, 0xf, 0x7, 0xc, 0x2, 0x68}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0xf, 0xdc01, 0xfec00000, [0x6800000000000000, 0x3, 0x4, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.225196444s ago: executing program 4 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x40, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000740)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x0) 35.036385383s ago: executing program 4 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x5, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000, 0x6}, @empty, @private=0xa010101, 0xffffff00}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0x34) 34.753795932s ago: executing program 4 (id=305): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r0 = syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xa04080, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x553e, &(0x7f000000cb80)="$eJzs3E1vG1UXAOBjp2nTj7dvhFiw60gVUiLVVp1+CHYFWvEhWlUFFqzAsV3Lre2JYtcJWbFgiVjwTxBIrFjyG1iwZodYgNghgTwzDk1LECKuTZLnkcZn7vWdM/eOopHOTOQAjq3l5NefS3E+TkfEQkSci8j2SxGxOBl0Iw8vRMSFiCg/tpWK/t2OkxFxJiLOj5PnOUvFV59fGl289tNbv3zz3akTZ7/4+vv5rRqYtxcjoreR72/18pi28/ig6K+POlnsXR0VMf+i97Bop3ncaq1nGbbqk3H1LF5p5+PTjUeDcbzfrTfGsd25n/Vv9PMTDkbtSZ7sgAf1zazdbK1nsTNIs9jeyee1vZPf23YGwzxPs8j3UZY+hsNJzPtb2618PRsPs9joj49b2r0WabO1PY6jIhani0babWbzWP/31/m/7u1O/9F2MmptDjppP7lWrb1UrV2v1DbTZmvYulqp95rXryYr7e54WGXYqvdutNO03W1VG2lvNVlpNxqVWi1Zudla79T7Sa1WvVK9XLm2WuxdSl6/817SbSYr4/hqp/9o2OkOkvvpZpIfsZqsVa+8vJpcrCXv3L6b3L1369btu+9+cPP9O6/cfvO1YtBT00pW1i6vrVVqlytrtdVsGeVjsf5Pikk/vX6Yj9K8JwBw+Pxd/b97W1X/A1O2b/0/vgEdqP7fvBfx7Ov/OHD9P+7P86r/D0n9u3/9P+P1L8VRWT8ciPofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODY+mHxyzeyneW8fbbo/1/R9VzRLkVEOSJ+/wsLcXJPzoUiz+I+4xefmMO3pcgyjM9xqtjORMSNYvvt/8/6KgAAAMDR9dXHFz7Lq/X8Y3neE2KW8oc25XMfTinfUkQsLv84pWzl8cfzU0qW/X2fiO0pZcseYC1NKVn+yO3EtLL9Iwt7wtJjoZSH8kynAwAAzMTeSmC2VQgAAACz9Om8J8B8lGLyKnPyLjj7z/s/Xwie3tMCAAAADqHSvCcAAAAATN2T7/Gz+t/v/wEAAMDRlv/+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ac795OrNBDHAfzXQgH/RWLcexV3cAyP4NKl4QBeggO4wCu4c8UZcOcRDDW0A4J2wQvT8vLy+SRl6GT6ZYbAYmaSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD79rDbLb5/ffbk1Z19f60dE/F+bZzQAAABAl121WTZv5u39i1T/KlW9SfdFRJSdM/e6HsXkInOUcqq/7b+et6/+6cP3iCbh8BnTdD2PiPfp+v26728BAAAAnq7tar1oZ+vty/zeHWJI7aJN+fJDprwiIqr5r0xp5SHvbY6kSfp9j+NTjri0sBWzTGHtkts4V9pVmr/7adVudlYUbVF2PnbqZLaxAwAAAxpdFMPOQgAAABjSx3t3gNyu254r4riVedoKnF48/+whaQAAAMBjVNy7AwAAAEDvmvl/X+f/HRcXuto7/w8AAACG057/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ921Wa5Xa0Xt+bs69vkGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/37ipOADgz/b5SguoR0A3BCGQGGCh12tp6YYYQBEDfwJSlF5L6JUfbQZaVYhb2FDmLghGhJBAYev/0LmVuoQtww1BYgb5bOecHxLHj9iX5PORnt/Xzsnv+xwpytfvJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGn8zjROskMnj+Pi2qPteytZ/3hPn3mw/mQxa1kc1Zn00fBS9STqNpcIAAAAx9qoepKU9X0IYTPdWMr6uDOp/9PyM1nN/92zeVzW83vr/rIva/+s/frL1gs7A3XycbKbXlsdDs7vz6v1v8/0iDj7N1/PH0yUv3tJJt+Q+P3R8+N08jyjbx4+fLc9CU/VkS0A8G+cK/siKH8fyvp+k4kBcGK0KoV3Wf8nnWZzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjDeBSeLuMohLDYmsaZx9v3Vg7qH6w/WSzb5fv318NX03tmt0hDCNdWh4Pztc5mvt2+c/fG8nA4uFV/8HIIoanR3y6mf+PDGT4cQiPP5zCDs8X85yWfQw3iYrLzks/RCBr6gQQAwLGVFi2r6zfTjaXsWrQQwp/f767/X6vEYcb6f+ujy4+qY1Xr/35tM5x/vbWbn/Vu37n7xurN5euD64NP3rzQf6t/8cqlS1d6k3clPW9MAAAA+G/aRavW//HC/vX/M5U4zFj/f/5t/8vqWIn6/0DTRb+mMwEAADjZnnvlj9+jA65H7Xb4Ynlt7VY/P+6cX8iPDaT6j50qWrX+TxaazgoAAACow3gU7Vr/v1qJw4zr/8/88OJP1XsmIYTTxfr/uZVPh1frm85cq+PPiZueIwAAAM06XbTq+n862f8f72x5iEMIr7+ax8W/AZyp/k/e+/rH6ljV/f8X65viXIq7+fOY9N0QWt2mMwIAAOA4e6poWbH/W7qx9PHPZz5o2/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULe/AgAA///C6jYc") mkdirat(r0, &(0x7f0000000c40)='./file1\x00', 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000a40)='./file0/file1\x00', &(0x7f0000000a80), 0x0, 0x0, 0x0) 32.989342562s ago: executing program 4 (id=315): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20010090, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000780)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 32.4194461s ago: executing program 2 (id=320): mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x4, 0x66032, 0xffffffffffffffff, 0x40000000) mremap(&(0x7f00007fd000/0xe000)=nil, 0xe000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x11) flock(r1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') 32.155320167s ago: executing program 2 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000001c0)='./mnt\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)=@v2={0x2, @aes256, 0x9, '\x00', @auto="38b6cca302cf4b85a0983ec4a7d882c4"}) mkdir(&(0x7f00000007c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x8, &(0x7f00000008c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 31.699343074s ago: executing program 4 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 31.699079664s ago: executing program 2 (id=325): setresgid(0xee00, 0x0, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2c41, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./tracefs_dir\x00', &(0x7f0000003840)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003880)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003a00), 0x0, 0x0) write(r0, &(0x7f0000003900)='20', 0x2) 31.391379085s ago: executing program 32 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 30.65498352s ago: executing program 1 (id=330): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x804808, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000640)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") fsmount(0xffffffffffffffff, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x924924924924c31, 0x3ec0) r1 = fanotify_init(0x40, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents64(r2, &(0x7f0000000dc0)=""/163, 0xba974ed140df4995) 30.26477296s ago: executing program 1 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000480)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x8008662c, 0x0) 29.719434176s ago: executing program 1 (id=333): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2804800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x3, 0x1213, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}]}}) 27.854086866s ago: executing program 1 (id=341): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x80000, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r1, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 26.606470144s ago: executing program 1 (id=345): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x3820c4b, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x80080, 0x32) 24.167183013s ago: executing program 1 (id=348): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-cpu -pids'], 0xb) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') read(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 24.167090993s ago: executing program 33 (id=348): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-cpu -pids'], 0xb) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') read(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 16.442286502s ago: executing program 34 (id=325): setresgid(0xee00, 0x0, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2c41, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./tracefs_dir\x00', &(0x7f0000003840)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003880)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003a00), 0x0, 0x0) write(r0, &(0x7f0000003900)='20', 0x2) 10.419002847s ago: executing program 7 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x1, 0x2000, 0xb, 0x7, 0x4, 0xff, 0x7f, 0x5, 0x0, 0xbc, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x8, 0x3, 0xf0, 0x9, 0x5}, {0x60000, 0x5000, 0x4, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xb, 0xed}, {0xffc, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x1, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xffff1000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x6, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000023, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 9.99434836s ago: executing program 3 (id=384): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000340)=[{0x84, 0x77, 0x0, 0x0, @tick=0x678, {}, {}, @raw32}], 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000003c0)={0x0, 0x2, 0xbe}) close_range(r0, 0xffffffffffffffff, 0x0) 9.9927952s ago: executing program 5 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000bc0)={0x3c3, "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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @binary="56ccabd869c2"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.313825869s ago: executing program 3 (id=385): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x5, 0x0, 0xfffff024}, {0x6, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 8.077595976s ago: executing program 5 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000bc0)={0x3c3, "d4ad80fe2779d430c14026e426d0a81f18552622a378160a24c570a10566394e946593aaa2dbbeac3263235246f73c345da5b45d9b428f0461f83cef92553b91e59bf67a6ab9e638acc673ce2a5aaef18403be84345e84d0f0b9a14a61f959ed95958dc3be38a8c5f4ce97b1e7340cef310f58d1c9339dab6289e77f9e2d7b63571e6230493a532887f9f05935d2a0fcd13d2d5b3b6c2bea156c9432b5c13333fdd7821cefea331d8e2141f2690409a2145181c592003e5f57aa6a4d6f714e44f4a6665c7516d66a218a9ef3110db8ae44e6a1720c7cb7680bad0fb511993270a5b9827acb70dcce14f0f48f215fcd89a353da1bf55a3a7539e55a54bcf193a516b7352a69ce4b8b040da040bb4822c4546ab091de40eae4eb3bcbda566bcfef6ee7f7c766220baf90ba7e9d3d899cb0363d55aae2135915c8541152b4c51fe9b2a7ec8a13bb196ce4f568bff8d29669453afa76e9af541e324de1090b92ecc66a4b159a34f3a3a6a65592b1c1523e9ade44d23f13e2fc530f2b4c951ec2e1e71b2dca584f4824cff6a33ed2187859d03786ec5b14e89b8751d5cace920f0c472a3f17c6d2e8d55e7f3c80176be86620280babb70af2460355cb37105785c7887055369426a04763fad27a73045db214800b67b5f8a06a666e391f4888815f1c58456c2496e0cbfc79ee3f3a7c0eee20a504836f92b31f558837bf587368ff1f735d959c66ff072c738df788211b845e2aa914e7f9f5f32188ca61ff187ce6d2c45578875a3da074fb738da2a9dc3fae697dacd452e4e4c750872b3558fb31f03fef927bb2826f2e4781e6de9aee771c407bd30d246f67ef0d356156a66f576a17c53921f0bee0155f583207dab4b2041b906db8134afdc86c17f79818faa0d2ff72ee741ad28e2fb7337d938c5bf73e8dd08b669adf4c86c73392d12753093f6c2d015615fa21474ec5a3f5294001904ae8c34b2457b9c6182186e110c5d5fcb5b5ce69efb3b83ad1ed7c1f446375f898c926ffc7c44caaede15118a07fc00933e33bb1ef4cc9f1605e92551a287e305a86a0a790c1cae1690d20f5fbb042ecf828217259c5d0ae77c92a285c7c0b1370f523289ca45f5fd6dedb67f96f5f780491058afed06015ab26be720cd12b2ab965c8850312a6ac210b289e3cdb4ce567ecf777452fb3f8b745174c942684d444190b88d6ecf7a914a2d6a2cf2d948ed375a53ddc70fb6cfdae761c9fc933acd4c8571762dba2cb512a338872a9a321eb1257d3db1ef98e83eab43421b4abd710541dd08874e75784c8853258ab44a9e5795b9e21b34b317b30f38ba3bdbd4e7a66a4eb056a1953952fceaf8715076bdb5f83"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @binary="56ccabd869c2"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.775587149s ago: executing program 7 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x1, 0x2000, 0xb, 0x7, 0x4, 0xff, 0x7f, 0x5, 0x0, 0xbc, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x8, 0x3, 0xf0, 0x9, 0x5}, {0x60000, 0x5000, 0x4, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xb, 0xed}, {0xffc, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x1, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xffff1000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x6, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000023, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 5.912921267s ago: executing program 3 (id=388): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) 5.911849487s ago: executing program 5 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000bc0)={0x3c3, "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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @binary="56ccabd869c2"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.090325331s ago: executing program 7 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x1, 0x2000, 0xb, 0x7, 0x4, 0xff, 0x7f, 0x5, 0x0, 0xbc, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x8, 0x3, 0xf0, 0x9, 0x5}, {0x60000, 0x5000, 0x4, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xb, 0xed}, {0xffc, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x1, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xffff1000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x6, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000023, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 4.749010566s ago: executing program 3 (id=390): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.736610947s ago: executing program 0 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.329560398s ago: executing program 5 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000bc0)={0x3c3, "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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @binary="56ccabd869c2"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.980809134s ago: executing program 0 (id=392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x8, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 3.968115666s ago: executing program 6 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.53331939s ago: executing program 7 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x1, 0x2000, 0xb, 0x7, 0x4, 0xff, 0x7f, 0x5, 0x0, 0xbc, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x8, 0x3, 0xf0, 0x9, 0x5}, {0x60000, 0x5000, 0x4, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xb, 0xed}, {0xffc, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x1, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xffff1000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x6, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000023, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 3.123816832s ago: executing program 3 (id=393): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) write(0x1, &(0x7f0000c04028)="01", 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000002280)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000002300)={0x1, 0x0, [{0x40000073, 0x0, 0x3001}]}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000200)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}, {"d07ee51100"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.123499992s ago: executing program 6 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.780191847s ago: executing program 5 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000bc0)={0x3c3, "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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @binary="56ccabd869c2"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.447104111s ago: executing program 0 (id=399): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.437866682s ago: executing program 6 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.013232095s ago: executing program 7 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x1, 0x2000, 0xb, 0x7, 0x4, 0xff, 0x7f, 0x5, 0x0, 0xbc, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x8, 0x3, 0xf0, 0x9, 0x5}, {0x60000, 0x5000, 0x4, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xb, 0xed}, {0xffc, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x1, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xffff1000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x6, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000023, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 1.531724254s ago: executing program 3 (id=394): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000840)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x81, 0x4) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 1.521408035s ago: executing program 0 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x220c004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'veth0\x00', &(0x7f0000000480)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000026c0)='fd/3\x00') 1.506823347s ago: executing program 6 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.111383407s ago: executing program 5 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000bc0)={0x3c3, "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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @binary="56ccabd869c2"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 759.682943ms ago: executing program 0 (id=396): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000340)=[{0x84, 0x77, 0x0, 0x0, @tick=0x678, {}, {}, @raw32}], 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000003c0)={0x0, 0x2, 0xbe}) close_range(r0, 0xffffffffffffffff, 0x0) 759.510593ms ago: executing program 6 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 357.864084ms ago: executing program 7 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x1, 0x2000, 0xb, 0x7, 0x4, 0xff, 0x7f, 0x5, 0x0, 0xbc, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x8, 0x3, 0xf0, 0x9, 0x5}, {0x60000, 0x5000, 0x4, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xb, 0xed}, {0xffc, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x1, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xffff1000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x6, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000023, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 12.678849ms ago: executing program 0 (id=397): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000042c0)=[{&(0x7f0000000000)="b7", 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 0s ago: executing program 6 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): l (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.123170][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.138665][ T4285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.152898][ T4285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.167681][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.174712][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.200954][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.242681][ T4283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.270688][ T4275] device hsr_slave_0 entered promiscuous mode [ 65.277905][ T4275] device hsr_slave_1 entered promiscuous mode [ 65.284993][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.292918][ T4275] Cannot create hsr debugfs directory [ 65.305188][ T4283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.315848][ T4283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.339466][ T4283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.467924][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.500686][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.510014][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.519671][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.607742][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.628885][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.639733][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.649717][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.659346][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.668814][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.694956][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.711173][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.721126][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.744094][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.754011][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.765438][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.779574][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.791530][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.818642][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.827000][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.837633][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.846733][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.858807][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.866088][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.875017][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.885523][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.894250][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.901605][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.909696][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.921562][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.930386][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.959466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.968811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.978051][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.985197][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.995938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.005466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.014620][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.021668][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.029665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.039304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.048693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.071096][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.094730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.105870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.114628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.124407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.133823][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.140878][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.148664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.158164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.166808][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.174187][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.182400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.190983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.199728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.208000][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 66.208096][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 66.214273][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 66.220103][ T50] Bluetooth: hci2: command 0x041b tx timeout [ 66.234085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.243114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.255634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.263571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.271453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.282016][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 66.296109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.306549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.319432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.337876][ T4285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.350780][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.370445][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.386921][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.400881][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.417387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.426678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.435615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.448568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.459035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.474735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.487393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.497574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.509852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.526070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.537241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.548347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.556683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.566020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.574952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.585548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.594314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.603375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.611701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.620674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.629055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.649530][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.670033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.682527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.691062][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.698213][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.716312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.725556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.734894][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.742041][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.767317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.793160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.814572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.863731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.884432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.909681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.940713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.990512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.999541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.009464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.017937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.026334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.045746][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.072636][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.116040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.125123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.148720][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.180633][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.205972][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.233060][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.266066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.276014][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.284893][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.292035][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.308012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.318034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.336306][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.343489][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.354995][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.405317][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.423128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.433597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.448151][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.459083][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.470336][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.479206][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.490456][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.503510][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.513500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.521214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.533264][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.540737][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.570783][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.579745][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.588402][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.597864][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.606759][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.614277][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.628054][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.639512][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.652182][ T4274] device veth0_vlan entered promiscuous mode [ 67.666498][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.684840][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.696412][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.706253][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.730531][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.744263][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.760809][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.816530][ T4274] device veth1_vlan entered promiscuous mode [ 67.862903][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.877769][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.912160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.932602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.951586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.960453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.990095][ T4283] device veth0_vlan entered promiscuous mode [ 67.997655][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.012934][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.027066][ T4274] device veth0_macvtap entered promiscuous mode [ 68.044975][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.056023][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.069760][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.080742][ T4274] device veth1_macvtap entered promiscuous mode [ 68.100112][ T4283] device veth1_vlan entered promiscuous mode [ 68.115111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.142765][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.151035][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.168250][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.180472][ T4273] device veth0_vlan entered promiscuous mode [ 68.199684][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.212335][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.220448][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.236469][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.246239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.255808][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.268350][ T4273] device veth1_vlan entered promiscuous mode [ 68.284784][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.292141][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 68.298156][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 68.304491][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 68.304521][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 68.330692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.341160][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.356762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.362530][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 68.387161][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.401387][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.411938][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.420664][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.445275][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.456981][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.464814][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.497410][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.509169][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.524722][ T4273] device veth0_macvtap entered promiscuous mode [ 68.537171][ T4273] device veth1_macvtap entered promiscuous mode [ 68.549312][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.559291][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.568554][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.578998][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.587418][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.596546][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.606271][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.645637][ T4283] device veth0_macvtap entered promiscuous mode [ 68.668908][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.680240][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.692725][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.710098][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.720813][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.734116][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.746279][ T4285] device veth0_vlan entered promiscuous mode [ 68.755806][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.764390][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.774749][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.783919][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.793055][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.802069][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.810343][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.821038][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.829226][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.846042][ T4283] device veth1_macvtap entered promiscuous mode [ 68.863909][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.875348][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.893339][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.907754][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.917151][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.928700][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.948926][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.960216][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.971191][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.986942][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.999254][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.032204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.040818][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.054240][ T4285] device veth1_vlan entered promiscuous mode [ 69.063064][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.073643][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.084239][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.094870][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.106541][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.118044][ T4283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.127333][ T4283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.136560][ T4283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.146215][ T4283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.191458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.201105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.232173][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.241018][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.268272][ T4285] device veth0_macvtap entered promiscuous mode [ 69.278723][ T4285] device veth1_macvtap entered promiscuous mode [ 69.288561][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.297328][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.307433][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.316162][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.328004][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.336316][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.363050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.371026][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.383021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.393035][ T4275] device veth0_vlan entered promiscuous mode [ 69.427321][ T4275] device veth1_vlan entered promiscuous mode [ 69.452546][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.464514][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.474535][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.486474][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.496605][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.507369][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.519248][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.531346][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.548547][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.556124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.564804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.576437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.586772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.596185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.620288][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.633089][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.645721][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.656738][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.667084][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.678328][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.689449][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.701934][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.710743][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.720126][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.720540][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.734163][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.738527][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.777508][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.790537][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.800677][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.823078][ T4275] device veth0_macvtap entered promiscuous mode [ 69.844254][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.864062][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.881601][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.901312][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.920956][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.923515][ T4374] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.947673][ T4275] device veth1_macvtap entered promiscuous mode [ 69.977289][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.001206][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.032552][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.065878][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.078432][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.088331][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.099065][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.108939][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.119626][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.129891][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.140478][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.156726][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.165382][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.177623][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.186453][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.204249][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.221566][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.232831][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.240466][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.254448][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.268518][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.279240][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.298911][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.311480][ T4379] loop0: detected capacity change from 0 to 128 [ 70.319263][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.353423][ T4379] syz.0.6: attempt to access beyond end of device [ 70.353423][ T4379] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 70.362173][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 70.367533][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 70.367565][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 70.367590][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 70.391540][ T4379] syz.0.6: attempt to access beyond end of device [ 70.391540][ T4379] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 70.411738][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.422474][ T4379] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 70.442456][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 70.453122][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.481986][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.483034][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.489996][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.509134][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.540058][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.554319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.580265][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.590297][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.600254][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.622634][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.696914][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.708105][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.723222][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.863016][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.870903][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.923305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.962159][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.970046][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.012591][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.135819][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.161281][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.171367][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.177993][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.216205][ T4400] device gretap0 entered promiscuous mode [ 71.253828][ T4400] device gretap0 left promiscuous mode [ 71.310322][ T4402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.349150][ T4402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.427876][ T4402] device gretap0 entered promiscuous mode [ 71.493504][ T4402] device gretap0 left promiscuous mode [ 71.582528][ T4402] Zero length message leads to an empty skb [ 71.898324][ T4424] input: syz0 as /devices/virtual/input/input5 [ 72.691914][ T4340] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.795344][ T4461] block device autoloading is deprecated and will be removed. [ 72.879105][ T4461] md/raid1:md0: active with 1 out of 3 mirrors [ 72.884209][ T4441] loop4: detected capacity change from 0 to 40427 [ 72.888319][ T4461] md0: detected capacity change from 0 to 4096 [ 72.915885][ T4340] usb 2-1: config 0 has no interfaces? [ 72.922456][ T4340] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 72.927654][ T4441] F2FS-fs (loop4): invalid crc value [ 72.941308][ T4340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.988065][ T4340] usb 2-1: config 0 descriptor?? [ 72.998038][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.024200][ T4441] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.161738][ T4441] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 73.205095][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 73.220379][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.242629][ T4441] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 73.397370][ T4340] usb 2-1: USB disconnect, device number 2 [ 73.489031][ T14] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 73.545643][ T4441] syz.4.23: attempt to access beyond end of device [ 73.545643][ T4441] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 73.593703][ T4480] ucsi_ccg 0-0008: failed to get FW build information [ 73.710817][ T4285] syz-executor: attempt to access beyond end of device [ 73.710817][ T4285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.743083][ T4480] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 73.751571][ T4480] ucsi_ccg: probe of 0-0008 failed with error -110 [ 73.776473][ T4480] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 74.069200][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.759473][ T4486] loop0: detected capacity change from 0 to 131072 [ 74.786752][ T4486] F2FS-fs (loop0): invalid crc value [ 74.836161][ T4486] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.875554][ T4486] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 74.885513][ T4486] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 75.843741][ T4541] loop1: detected capacity change from 0 to 512 [ 75.927626][ T4541] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 75.968458][ T4549] block nbd0: shutting down sockets [ 76.061141][ T4541] Bluetooth: MGMT ver 1.22 [ 76.255763][ T4554] loop3: detected capacity change from 0 to 1024 [ 76.280180][ T4554] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.377681][ T4554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.614716][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 77.049126][ T4556] loop0: detected capacity change from 0 to 32768 [ 77.061445][ T4556] ======================================================= [ 77.061445][ T4556] WARNING: The mand mount option has been deprecated and [ 77.061445][ T4556] and is ignored by this kernel. Remove the mand [ 77.061445][ T4556] option from the mount to silence this warning. [ 77.061445][ T4556] ======================================================= [ 77.298965][ T4556] XFS (loop0): Mounting V5 Filesystem [ 77.372474][ T4597] loop3: detected capacity change from 0 to 128 [ 77.416335][ T4597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.448029][ T4556] XFS (loop0): Ending clean mount [ 77.455367][ T4597] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.513529][ T4597] EXT4-fs (loop3): shut down requested (1) [ 77.513650][ T4556] XFS (loop0): Quotacheck needed: Please wait. [ 77.555248][ T4597] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 77.637375][ T4556] XFS (loop0): Quotacheck: Done. [ 77.649966][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 77.693560][ T4600] loop4: detected capacity change from 0 to 1024 [ 77.712921][ T4600] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.777526][ T4600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.817036][ T4274] XFS (loop0): Unmounting Filesystem [ 77.914323][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 78.238116][ T4615] loop0: detected capacity change from 0 to 512 [ 78.282695][ T4615] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 79.271930][ T4340] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.334969][ T14] usb 3-1: USB disconnect, device number 2 [ 79.353592][ T4372] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.463772][ T4340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.494445][ T4340] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.528814][ T4340] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.551924][ T4372] usb 4-1: Using ep0 maxpacket: 32 [ 79.558979][ T4372] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 79.600827][ T4372] usb 4-1: config 0 has no interface number 0 [ 79.607365][ T4340] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.618324][ T4650] FAULT_INJECTION: forcing a failure. [ 79.618324][ T4650] name failslab, interval 1, probability 0, space 0, times 1 [ 79.636572][ T4372] usb 4-1: config 0 interface 184 has no altsetting 0 [ 79.639385][ T4650] CPU: 1 PID: 4650 Comm: syz.4.77 Not tainted syzkaller #0 [ 79.650584][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.651916][ T4340] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 79.660655][ T4650] Call Trace: [ 79.660667][ T4650] [ 79.660676][ T4650] dump_stack_lvl+0x188/0x24e [ 79.674293][ T4372] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.675961][ T4650] ? show_regs_print_info+0x12/0x12 [ 79.690942][ T4372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.694811][ T4650] ? load_image+0x410/0x410 [ 79.694850][ T4650] ? __might_sleep+0xd0/0xd0 [ 79.694867][ T4650] ? __lock_acquire+0x7ea0/0x7ea0 [ 79.694893][ T4650] should_fail_ex+0x390/0x4c0 [ 79.694920][ T4650] should_failslab+0x5/0x20 [ 79.694936][ T4650] slab_pre_alloc_hook+0x59/0x300 [ 79.709238][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.711990][ T4650] kmem_cache_alloc_lru+0x49/0x2e0 [ 79.712018][ T4650] ? __d_alloc+0x2e/0x6e0 [ 79.712037][ T4650] __d_alloc+0x2e/0x6e0 [ 79.712053][ T4650] ? d_alloc_pseudo+0xe/0x70 [ 79.717790][ T4372] usb 4-1: Product: syz [ 79.721720][ T4650] d_alloc_pseudo+0x19/0x70 [ 79.721746][ T4650] alloc_file_pseudo+0xe0/0x200 [ 79.732367][ T4372] usb 4-1: Manufacturer: syz [ 79.739214][ T4650] ? alloc_empty_file_noaccount+0x80/0x80 [ 79.739244][ T4650] ? alloc_fd+0x590/0x640 [ 79.739273][ T4650] anon_inode_getfd+0xc6/0x1b0 [ 79.739298][ T4650] do_signalfd4+0x183/0x320 [ 79.739323][ T4650] __x64_sys_signalfd4+0x157/0x1a0 [ 79.739345][ T4650] ? lock_chain_count+0x20/0x20 [ 79.747126][ T4372] usb 4-1: SerialNumber: syz [ 79.748751][ T4650] ? signalfd_cleanup+0x60/0x60 [ 79.748786][ T4650] ? lockdep_hardirqs_on+0x94/0x140 [ 79.768381][ T4372] usb 4-1: config 0 descriptor?? [ 79.771012][ T4650] do_syscall_64+0x4c/0xa0 [ 79.771038][ T4650] ? clear_bhb_loop+0x60/0xb0 [ 79.788555][ T4372] smsc75xx v1.0.0 [ 79.790381][ T4650] ? clear_bhb_loop+0x60/0xb0 [ 79.790413][ T4650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.847775][ T4650] RIP: 0033:0x7f0a0a39f559 [ 79.852222][ T4650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.871855][ T4650] RSP: 002b:00007f0a0b34f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 79.880296][ T4650] RAX: ffffffffffffffda RBX: 00007f0a0a625fa0 RCX: 00007f0a0a39f559 [ 79.888289][ T4650] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 79.896285][ T4650] RBP: 00007f0a0a436b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.904281][ T4650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.912291][ T4650] R13: 00007f0a0a626038 R14: 00007f0a0a625fa0 R15: 00007ffdb5b142a8 [ 79.920312][ T4650] [ 80.084078][ T4661] loop4: detected capacity change from 0 to 512 [ 80.136857][ T4661] ext4: Unknown parameter 'dont_measure' [ 80.361923][ T4291] Bluetooth: hci0: command 0x040b tx timeout [ 80.530118][ T4663] loop4: detected capacity change from 0 to 164 [ 80.590143][ T4656] orangefs_mount: mount request failed with -4 [ 80.856355][ T4340] [drm] Initialized gud 1.0.0 20200422 for 1-1:1.0 on minor 2 [ 80.933384][ T4478] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.952582][ T4662] loop4: detected capacity change from 0 to 512 [ 80.964418][ T4662] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.971079][ T4662] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.80: casefold flag without casefold feature [ 80.986230][ T4662] EXT4-fs (loop4): Remounting filesystem read-only [ 80.992888][ T4662] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.80: couldn't read orphan inode 15 (err -117) [ 80.999457][ T4372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 81.019762][ T4662] EXT4-fs (loop4): Remounting filesystem read-only [ 81.026485][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.031299][ T4340] gud 1-1:1.0: [drm] *ERROR* fbdev: Failed to setup generic emulation (ret=-22) [ 81.061662][ T4372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 81.126385][ T4372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 81.142204][ T4340] usb 1-1: USB disconnect, device number 2 [ 81.167797][ T4372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 81.180296][ T4372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 81.218462][ T4372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 81.280505][ T4372] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 81.330998][ T4372] usb 4-1: USB disconnect, device number 2 [ 81.369055][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 81.407930][ T129] cfg80211: failed to load regulatory.db [ 81.945648][ T4670] loop1: detected capacity change from 0 to 32768 [ 81.991397][ T4670] XFS (loop1): Mounting V5 Filesystem [ 82.087554][ T4670] XFS (loop1): Ending clean mount [ 82.097394][ T4670] XFS (loop1): Quotacheck needed: Please wait. [ 82.146064][ T4670] XFS (loop1): Quotacheck: Done. [ 82.201947][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 82.211095][ T4283] XFS (loop1): Unmounting Filesystem [ 82.475606][ T4694] syz.3.89 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 82.501477][ T4694] CPU: 0 PID: 4694 Comm: syz.3.89 Not tainted syzkaller #0 [ 82.508736][ T4694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.518806][ T4694] Call Trace: [ 82.522099][ T4694] [ 82.525040][ T4694] dump_stack_lvl+0x188/0x24e [ 82.529742][ T4694] ? ___ratelimit+0x14e/0x610 [ 82.534451][ T4694] ? show_regs_print_info+0x12/0x12 [ 82.539681][ T4694] ? load_image+0x410/0x410 [ 82.544207][ T4694] ? ___ratelimit+0x474/0x610 [ 82.548909][ T4694] ? radix_tree_cpu_dead+0x160/0x160 [ 82.554227][ T4694] dump_header+0xd8/0x820 [ 82.558591][ T4694] oom_kill_process+0x361/0x550 [ 82.563463][ T4694] out_of_memory+0xe25/0x1220 [ 82.568174][ T4694] ? mutex_lock_nested+0x10/0x10 [ 82.573163][ T4694] ? unregister_oom_notifier+0x20/0x20 [ 82.578636][ T4694] mem_cgroup_out_of_memory+0x2c0/0x390 [ 82.584197][ T4694] ? mem_cgroup_oom_trylock+0x210/0x210 [ 82.589753][ T4694] ? do_raw_spin_unlock+0x11d/0x230 [ 82.594946][ T4694] try_charge_memcg+0xc9d/0x17c0 [ 82.599899][ T4694] ? percpu_ref_put+0x180/0x180 [ 82.604750][ T4694] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 82.610474][ T4694] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.616455][ T4694] ? percpu_ref_tryget+0x15/0x180 [ 82.621483][ T4694] ? percpu_ref_tryget+0x15/0x180 [ 82.626503][ T4694] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 82.632226][ T4694] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 82.637945][ T4694] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 82.643754][ T4694] obj_cgroup_charge+0x36a/0x620 [ 82.648695][ T4694] ? obj_cgroup_charge+0xe9/0x620 [ 82.653716][ T4694] ? mod_objcg_mlstate+0x320/0x320 [ 82.658824][ T4694] ? percpu_ref_tryget+0x15/0x180 [ 82.663844][ T4694] ? percpu_ref_tryget+0x15/0x180 [ 82.668872][ T4694] ? get_obj_cgroup_from_current+0xd0/0x280 [ 82.674763][ T4694] slab_pre_alloc_hook+0x2e2/0x300 [ 82.679871][ T4694] ? prog_array_map_alloc+0x4d/0x1f0 [ 82.685168][ T4694] __kmem_cache_alloc_node+0x4f/0x270 [ 82.690554][ T4694] ? prog_array_map_alloc+0x4d/0x1f0 [ 82.695842][ T4694] kmalloc_trace+0x26/0xe0 [ 82.700253][ T4694] prog_array_map_alloc+0x4d/0x1f0 [ 82.705367][ T4694] map_create+0x524/0xff0 [ 82.709699][ T4694] ? security_bpf+0x7a/0xa0 [ 82.714207][ T4694] __sys_bpf+0x38b/0x780 [ 82.718470][ T4694] ? bpf_link_show_fdinfo+0x380/0x380 [ 82.723874][ T4694] ? lock_chain_count+0x20/0x20 [ 82.728733][ T4694] __x64_sys_bpf+0x78/0x90 [ 82.733147][ T4694] do_syscall_64+0x4c/0xa0 [ 82.737556][ T4694] ? clear_bhb_loop+0x60/0xb0 [ 82.742225][ T4694] ? clear_bhb_loop+0x60/0xb0 [ 82.746893][ T4694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.752789][ T4694] RIP: 0033:0x7fd7d0d9f559 [ 82.757200][ T4694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.776801][ T4694] RSP: 002b:00007fd7d1d1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.785210][ T4694] RAX: ffffffffffffffda RBX: 00007fd7d1025fa0 RCX: 00007fd7d0d9f559 [ 82.793178][ T4694] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 82.801143][ T4694] RBP: 00007fd7d0e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.809128][ T4694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.817088][ T4694] R13: 00007fd7d1026038 R14: 00007fd7d1025fa0 R15: 00007ffd49ba8508 [ 82.825067][ T4694] [ 82.832112][ T956] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.852178][ T4694] memory: usage 0kB, limit 0kB, failcnt 19 [ 82.858924][ T4694] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 82.866777][ T4694] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 82.875050][ T4694] Memory cgroup stats for /syz3/test: [ 82.875522][ T4694] anon 0 [ 82.875522][ T4694] file 0 [ 82.875522][ T4694] kernel 0 [ 82.875522][ T4694] kernel_stack 0 [ 82.875522][ T4694] pagetables 0 [ 82.875522][ T4694] sec_pagetables 0 [ 82.875522][ T4694] percpu 0 [ 82.875522][ T4694] sock 0 [ 82.875522][ T4694] vmalloc 0 [ 82.875522][ T4694] shmem 0 [ 82.875522][ T4694] zswap 0 [ 82.875522][ T4694] zswapped 0 [ 82.875522][ T4694] file_mapped 0 [ 82.875522][ T4694] file_dirty 0 [ 82.875522][ T4694] file_writeback 0 [ 82.875522][ T4694] swapcached 0 [ 82.875522][ T4694] anon_thp 0 [ 82.875522][ T4694] file_thp 0 [ 82.875522][ T4694] shmem_thp 0 [ 82.875522][ T4694] inactive_anon 0 [ 82.875522][ T4694] active_anon 0 [ 82.875522][ T4694] inactive_file 0 [ 82.875522][ T4694] active_file 0 [ 82.875522][ T4694] unevictable 0 [ 82.875522][ T4694] slab_reclaimable 0 [ 82.875522][ T4694] slab_unreclaimable 0 [ 82.875522][ T4694] slab 0 [ 82.875522][ T4694] workingset_refault_anon 0 [ 82.973927][ T4694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.89,pid=4693,uid=0 [ 82.992310][ T4694] Memory cgroup out of memory: Killed process 4693 (syz.3.89) total-vm:102272kB, anon-rss:1416kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 83.094021][ T956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.122039][ T956] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.136037][ T956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.141930][ T4372] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.166263][ T956] usb 1-1: config 0 descriptor?? [ 83.337392][ T4372] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 83.357028][ T4372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.377892][ T4372] usb 3-1: Product: syz [ 83.381375][ T956] usbhid 1-1:0.0: can't add hid device: -71 [ 83.389695][ T956] usbhid: probe of 1-1:0.0 failed with error -71 [ 83.396309][ T4372] usb 3-1: Manufacturer: syz [ 83.399440][ T956] usb 1-1: USB disconnect, device number 3 [ 83.411531][ T4372] usb 3-1: SerialNumber: syz [ 83.650212][ T4372] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 83.676283][ T4372] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 84.021925][ T956] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.216326][ T956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.238614][ T956] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 84.250706][ T956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.267357][ T956] usb 1-1: config 0 descriptor?? [ 84.441943][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 84.700667][ T4372] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 84.731599][ T4372] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 84.743418][ T4372] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 84.755834][ T4372] lan78xx: probe of 3-1:1.0 failed with error -71 [ 84.780108][ T4372] usb 3-1: USB disconnect, device number 3 [ 85.102548][ T956] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 85.129436][ T956] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 85.320084][ T4741] FAULT_INJECTION: forcing a failure. [ 85.320084][ T4741] name fail_futex, interval 1, probability 0, space 0, times 1 [ 85.333204][ T4741] CPU: 0 PID: 4741 Comm: syz.2.105 Not tainted syzkaller #0 [ 85.340539][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.350634][ T4741] Call Trace: [ 85.353938][ T4741] [ 85.356885][ T4741] dump_stack_lvl+0x188/0x24e [ 85.361592][ T4741] ? read_lock_is_recursive+0x10/0x10 [ 85.366998][ T4741] ? show_regs_print_info+0x12/0x12 [ 85.372220][ T4741] ? load_image+0x410/0x410 [ 85.376748][ T4741] ? finish_task_switch+0x262/0x8e0 [ 85.381970][ T4741] ? lockdep_hardirqs_on+0x94/0x140 [ 85.387194][ T4741] ? finish_task_switch+0x262/0x8e0 [ 85.392424][ T4741] should_fail_ex+0x390/0x4c0 [ 85.397130][ T4741] get_futex_key+0x1b1/0x1000 [ 85.401834][ T4741] ? futex_setup_timer+0xc0/0xc0 [ 85.406798][ T4741] ? release_firmware_map_entry+0x187/0x187 [ 85.412721][ T4741] futex_wait_setup+0xb8/0x270 [ 85.417507][ T4741] ? futex_wait_multiple+0x920/0x920 [ 85.422816][ T4741] ? schedule+0xd0/0x180 [ 85.427085][ T4741] futex_wait+0x1b8/0x5c0 [ 85.431442][ T4741] ? futex_wait_setup+0x270/0x270 [ 85.436507][ T4741] ? file_end_write+0x156/0x250 [ 85.441386][ T4741] ? vfs_write+0x777/0x9a0 [ 85.445836][ T4741] do_futex+0x310/0x320 [ 85.450034][ T4741] ? __ia32_sys_get_robust_list+0x100/0x100 [ 85.455960][ T4741] __se_sys_futex+0x381/0x410 [ 85.460666][ T4741] ? __x64_sys_futex+0xf0/0xf0 [ 85.465458][ T4741] ? __x64_sys_futex+0x1d/0xf0 [ 85.470247][ T4741] do_syscall_64+0x4c/0xa0 [ 85.474687][ T4741] ? clear_bhb_loop+0x60/0xb0 [ 85.479390][ T4741] ? clear_bhb_loop+0x60/0xb0 [ 85.484099][ T4741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.490027][ T4741] RIP: 0033:0x7eff2f19f559 [ 85.494466][ T4741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.504360][ T956] usb 1-1: USB disconnect, device number 4 [ 85.514075][ T4741] RSP: 002b:00007eff2ffcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 85.514104][ T4741] RAX: ffffffffffffffda RBX: 00007eff2f425fa0 RCX: 00007eff2f19f559 [ 85.514116][ T4741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.514125][ T4741] RBP: 00007eff2f236b20 R08: 0000000000000000 R09: 0000000000000002 [ 85.514135][ T4741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.514146][ T4741] R13: 00007eff2f426038 R14: 00007eff2f425fa0 R15: 00007ffc40cc2298 [ 85.514173][ T4741] [ 85.514206][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 85.660740][ T4745] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 85.741231][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.766017][ T4340] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.773789][ T4743] loop3: detected capacity change from 0 to 32768 [ 86.166191][ T4753] FAULT_INJECTION: forcing a failure. [ 86.166191][ T4753] name failslab, interval 1, probability 0, space 0, times 0 [ 86.206048][ T4755] loop0: detected capacity change from 0 to 512 [ 86.222023][ T4753] CPU: 1 PID: 4753 Comm: syz.3.110 Not tainted syzkaller #0 [ 86.229365][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.239470][ T4753] Call Trace: [ 86.242769][ T4753] [ 86.245712][ T4753] dump_stack_lvl+0x188/0x24e [ 86.250420][ T4753] ? show_regs_print_info+0x12/0x12 [ 86.255642][ T4753] ? load_image+0x410/0x410 [ 86.260176][ T4753] ? __might_sleep+0xd0/0xd0 [ 86.264795][ T4753] ? __lock_acquire+0x7ea0/0x7ea0 [ 86.269834][ T4753] should_fail_ex+0x390/0x4c0 [ 86.274516][ T4753] should_failslab+0x5/0x20 [ 86.279012][ T4753] slab_pre_alloc_hook+0x59/0x300 [ 86.284068][ T4753] ? allocate_partition+0x156/0x18b0 [ 86.289357][ T4753] __kmem_cache_alloc_node+0x4f/0x270 [ 86.294730][ T4753] ? allocate_partition+0x156/0x18b0 [ 86.300011][ T4753] kmalloc_trace+0x26/0xe0 [ 86.304423][ T4753] allocate_partition+0x156/0x18b0 [ 86.309533][ T4753] ? __might_fault+0xa6/0x120 [ 86.314217][ T4753] ? __lock_acquire+0x7ea0/0x7ea0 [ 86.319252][ T4753] mtd_add_partition+0x139/0x420 [ 86.324197][ T4753] ? __might_fault+0xc2/0x120 [ 86.328876][ T4753] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 86.333989][ T4753] ? shrink_ecclayout+0xab0/0xab0 [ 86.339025][ T4753] ? __might_fault+0xa6/0x120 [ 86.343715][ T4753] ? __might_fault+0xc2/0x120 [ 86.348393][ T4753] ? __might_fault+0xa6/0x120 [ 86.353074][ T4753] mtdchar_ioctl+0x13d3/0x1ae0 [ 86.357869][ T4753] ? mtdchar_close+0x180/0x180 [ 86.362631][ T4753] ? verify_lock_unused+0x140/0x140 [ 86.367829][ T4753] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 86.373475][ T4753] ? tomoyo_path_number_perm+0x205/0x650 [ 86.379119][ T4753] ? __lock_acquire+0x7ea0/0x7ea0 [ 86.384156][ T4753] ? slab_free_freelist_hook+0x133/0x1b0 [ 86.389813][ T4753] ? __mutex_trylock_common+0x15c/0x260 [ 86.395368][ T4753] ? trace_raw_output_contention_end+0xd0/0xd0 [ 86.401555][ T4753] ? rcu_is_watching+0x11/0xa0 [ 86.406331][ T4753] ? trace_contention_end+0x5f/0x170 [ 86.411623][ T4753] ? __mutex_lock+0x1ab/0xae0 [ 86.416306][ T4753] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 86.421680][ T4753] ? mutex_lock_nested+0x10/0x10 [ 86.426616][ T4753] ? __fget_files+0x28/0x460 [ 86.431214][ T4753] mtdchar_unlocked_ioctl+0xad/0xd0 [ 86.436412][ T4753] ? mtdchar_write+0x5c0/0x5c0 [ 86.441194][ T4753] __se_sys_ioctl+0xfa/0x170 [ 86.445821][ T4753] do_syscall_64+0x4c/0xa0 [ 86.450346][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 86.455028][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 86.459708][ T4753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.465676][ T4753] RIP: 0033:0x7fd7d0d9f559 [ 86.470088][ T4753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.489694][ T4753] RSP: 002b:00007fd7d1d1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.498112][ T4753] RAX: ffffffffffffffda RBX: 00007fd7d1025fa0 RCX: 00007fd7d0d9f559 [ 86.506076][ T4753] RDX: 0000200000001500 RSI: 0000000000001269 RDI: 0000000000000004 [ 86.514043][ T4753] RBP: 00007fd7d0e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.522012][ T4753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.529981][ T4753] R13: 00007fd7d1026038 R14: 00007fd7d1025fa0 R15: 00007ffd49ba8508 [ 86.537973][ T4753] [ 86.556529][ T4755] ext4: Unknown parameter 'dont_measure' [ 86.592135][ T4753] memory allocation error while creating partitions for "mtdram test device" [ 86.875753][ T4762] loop0: detected capacity change from 0 to 164 [ 86.910377][ T4762] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 87.453891][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 87.494645][ T4340] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 87.527427][ T4771] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 87.604920][ T4771] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.762419][ T956] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 87.783609][ T4340] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 87.901928][ T4337] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.954118][ T956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.964584][ T956] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.974924][ T956] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.989092][ T956] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 88.004936][ T956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.048070][ T4790] loop3: detected capacity change from 0 to 32768 [ 88.073565][ T4790] XFS (loop3): Mounting V5 Filesystem [ 88.102021][ T4337] usb 3-1: Using ep0 maxpacket: 32 [ 88.109591][ T4337] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 88.118271][ T4337] usb 3-1: config 0 has no interface number 0 [ 88.125127][ T4337] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 88.135691][ T4337] usb 3-1: config 0 interface 196 has no altsetting 0 [ 88.145520][ T4337] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 88.155060][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.163458][ T4337] usb 3-1: Product: syz [ 88.164161][ T4790] XFS (loop3): Ending clean mount [ 88.167874][ T4337] usb 3-1: Manufacturer: syz [ 88.177740][ T4337] usb 3-1: SerialNumber: syz [ 88.186045][ T4337] usb 3-1: config 0 descriptor?? [ 88.191772][ T4781] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 88.204396][ T4790] XFS (loop3): Quotacheck needed: Please wait. [ 88.264912][ T4790] XFS (loop3): Quotacheck: Done. [ 88.272932][ T4770] ceph: No mds server is up or the cluster is laggy [ 88.302537][ T4372] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.367853][ T4790] XFS (loop3): Unmounting Filesystem [ 88.438799][ T956] dvb_ttusb_budget: ttusb_init_controller: error [ 88.446699][ T956] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 88.580157][ T956] DVB: Unable to find symbol stv0299_attach() [ 88.635751][ T4337] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 88.678873][ T956] DVB: Unable to find symbol tda8083_attach() [ 88.691996][ T956] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 88.741880][ T4372] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 88.800139][ T4806] fuse: Bad value for 'fd' [ 88.815440][ T4807] dvb_ttusb_budget: cmd xter failed, receive error -90 [ 88.823729][ T4340] usb 2-1: USB disconnect, device number 3 [ 88.906967][ T4810] fuse: Bad value for 'fd' [ 88.946938][ T4372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 88.989214][ T4372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 88.999434][ T4372] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 89.019844][ T4372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.044179][ T4337] usb 3-1: USB disconnect, device number 4 [ 89.112757][ T4337] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 90.741883][ T4864] loop2: detected capacity change from 0 to 2048 [ 90.982376][ T4864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.082082][ T4337] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 91.303586][ T4337] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 91.333390][ T4337] usb 2-1: config 0 has no interface number 0 [ 91.386247][ T4337] usb 2-1: config 0 interface 41 has no altsetting 0 [ 91.441074][ T4337] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 91.463558][ T4880] fuse: Bad value for 'fd' [ 91.521947][ T4337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.529999][ T4337] usb 2-1: Product: syz [ 91.564259][ T4372] pegasus 5-1:1.0: can't reset MAC [ 91.569776][ T4372] pegasus: probe of 5-1:1.0 failed with error -5 [ 91.570229][ T4337] usb 2-1: Manufacturer: syz [ 91.611943][ T4337] usb 2-1: SerialNumber: syz [ 91.632051][ T4372] usb 5-1: USB disconnect, device number 2 [ 91.657547][ T4337] usb 2-1: config 0 descriptor?? [ 92.109693][ T4900] FAULT_INJECTION: forcing a failure. [ 92.109693][ T4900] name failslab, interval 1, probability 0, space 0, times 0 [ 92.171751][ T4900] CPU: 0 PID: 4900 Comm: syz.0.147 Not tainted syzkaller #0 [ 92.179139][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.189219][ T4900] Call Trace: [ 92.192523][ T4900] [ 92.195486][ T4900] dump_stack_lvl+0x188/0x24e [ 92.200197][ T4900] ? show_regs_print_info+0x12/0x12 [ 92.205427][ T4900] ? load_image+0x410/0x410 [ 92.209985][ T4900] ? __might_sleep+0xd0/0xd0 [ 92.214605][ T4900] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.219683][ T4900] should_fail_ex+0x390/0x4c0 [ 92.224404][ T4900] should_failslab+0x5/0x20 [ 92.228921][ T4900] slab_pre_alloc_hook+0x59/0x300 [ 92.233973][ T4900] kmem_cache_alloc_lru+0x49/0x2e0 [ 92.239128][ T4900] ? __d_alloc+0x2e/0x6e0 [ 92.243464][ T4900] __d_alloc+0x2e/0x6e0 [ 92.247623][ T4900] d_alloc_parallel+0xdc/0x1590 [ 92.252482][ T4900] ? lockdep_softirqs_off+0x430/0x430 [ 92.257857][ T4900] ? lockdep_softirqs_off+0x430/0x430 [ 92.263235][ T4900] ? d_hash_and_lookup+0x1b0/0x1b0 [ 92.268362][ T4900] ? __init_waitqueue_head+0xa4/0x140 [ 92.273741][ T4900] __lookup_slow+0x134/0x3f0 [ 92.278336][ T4900] ? lookup_one_len+0x2d0/0x2d0 [ 92.283210][ T4900] lookup_one_len+0x19d/0x2d0 [ 92.287978][ T4900] ? lookup_one_common+0x450/0x450 [ 92.293087][ T4900] ? do_raw_spin_unlock+0x11d/0x230 [ 92.298284][ T4900] ? mntput+0x61/0xb0 [ 92.302382][ T4900] start_creating+0x184/0x310 [ 92.307064][ T4900] __debugfs_create_file+0x6f/0x500 [ 92.312264][ T4900] ? blk_subbuf_start_callback+0xa0/0xa0 [ 92.317897][ T4900] relay_open_buf+0x5a1/0xd00 [ 92.322584][ T4900] relay_open+0x3d8/0x930 [ 92.326918][ T4900] do_blk_trace_setup+0x56c/0x9e0 [ 92.331952][ T4900] blk_trace_ioctl+0x3f8/0x580 [ 92.336725][ T4900] ? __blk_trace_startstop+0x630/0x630 [ 92.342187][ T4900] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 92.347702][ T4900] blkdev_ioctl+0x1b2/0x740 [ 92.352215][ T4900] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 92.357688][ T4900] ? bpf_lsm_file_ioctl+0x5/0x10 [ 92.362631][ T4900] ? security_file_ioctl+0x7c/0xa0 [ 92.367752][ T4900] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 92.373213][ T4900] __se_sys_ioctl+0xfa/0x170 [ 92.377829][ T4900] do_syscall_64+0x4c/0xa0 [ 92.382245][ T4900] ? clear_bhb_loop+0x60/0xb0 [ 92.386924][ T4900] ? clear_bhb_loop+0x60/0xb0 [ 92.391599][ T4900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.397498][ T4900] RIP: 0033:0x7f3e10f9f559 [ 92.401911][ T4900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.421531][ T4900] RSP: 002b:00007f3e11e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.429969][ T4900] RAX: ffffffffffffffda RBX: 00007f3e11225fa0 RCX: 00007f3e10f9f559 [ 92.438201][ T4900] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 0000000000000005 [ 92.446238][ T4900] RBP: 00007f3e11036b20 R08: 0000000000000000 R09: 0000000000000000 [ 92.454229][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.462197][ T4900] R13: 00007f3e11226038 R14: 00007f3e11225fa0 R15: 00007ffd0d2819c8 [ 92.470183][ T4900] [ 92.763855][ T4337] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 93.286355][ T4337] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 93.378167][ T4337] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 93.425154][ T4337] CoreChips: probe of 2-1:0.41 failed with error -71 [ 93.491458][ T4337] usb 2-1: USB disconnect, device number 4 [ 93.766351][ T4926] loop2: detected capacity change from 0 to 7 [ 93.787664][ T4477] loop2: [ 93.788276][ T4928] overlayfs: failed to clone upperpath [ 93.791145][ T4477] loop2: partition table partially beyond EOD, truncated [ 93.844213][ T4926] loop2: [ 93.847306][ T4926] loop2: partition table partially beyond EOD, truncated [ 94.005065][ T4934] raw_sendmsg: syz.1.158 forgot to set AF_INET. Fix it! [ 94.500350][ T4936] loop4: detected capacity change from 0 to 32768 [ 94.527644][ T4936] XFS (loop4): Mounting V5 Filesystem [ 94.563511][ T4936] XFS (loop4): Ending clean mount [ 95.155759][ T4971] ip_tables: iptables: counters copy to user failed while replacing table [ 95.322240][ T4337] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 95.338395][ T4977] device syzkaller1 entered promiscuous mode [ 95.475053][ T956] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.586703][ T4982] FAULT_INJECTION: forcing a failure. [ 95.586703][ T4982] name failslab, interval 1, probability 0, space 0, times 0 [ 95.606675][ T4982] CPU: 0 PID: 4982 Comm: syz.0.173 Not tainted syzkaller #0 [ 95.613438][ T4337] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.613989][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.631383][ T4337] usb 5-1: no configurations [ 95.631673][ T4982] Call Trace: [ 95.631681][ T4982] [ 95.637060][ T4337] usb 5-1: can't read configurations, error -22 [ 95.639530][ T4982] dump_stack_lvl+0x188/0x24e [ 95.653399][ T4982] ? show_regs_print_info+0x12/0x12 [ 95.658630][ T4982] ? load_image+0x410/0x410 [ 95.663151][ T4982] ? __might_sleep+0xd0/0xd0 [ 95.667767][ T4982] ? __lock_acquire+0x7ea0/0x7ea0 [ 95.672815][ T4982] should_fail_ex+0x390/0x4c0 [ 95.677501][ T4982] should_failslab+0x5/0x20 [ 95.682002][ T4982] slab_pre_alloc_hook+0x59/0x300 [ 95.687020][ T4982] ? __kernfs_new_node+0xa6/0x7f0 [ 95.692035][ T4982] __kmem_cache_alloc_node+0x4f/0x270 [ 95.697399][ T4982] ? __kernfs_new_node+0xa6/0x7f0 [ 95.702422][ T4982] __kmalloc_node_track_caller+0xa0/0x240 [ 95.708138][ T4982] kstrdup_const+0x56/0x90 [ 95.711935][ T956] usb 2-1: Using ep0 maxpacket: 8 [ 95.712547][ T4982] __kernfs_new_node+0xa6/0x7f0 [ 95.719483][ T956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.722394][ T4982] ? kernfs_new_node+0x250/0x250 [ 95.722430][ T4982] ? sysfs_do_create_link_sd+0x75/0x110 [ 95.722458][ T4982] kernfs_new_node+0x148/0x250 [ 95.734225][ T956] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 95.737605][ T4982] kernfs_create_link+0xa3/0x200 [ 95.743495][ T956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.747883][ T4982] sysfs_do_create_link_sd+0x83/0x110 [ 95.769905][ T956] usb 2-1: config 0 descriptor?? [ 95.775167][ T4982] device_add+0x83b/0x1050 [ 95.775205][ T4982] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 95.786083][ T956] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 95.790073][ T4982] wakeup_source_register+0x15f/0x230 [ 95.801595][ T4982] ep_insert+0xeab/0x1980 [ 95.805956][ T4982] ? ep_loop_check+0x1b0/0x1b0 [ 95.810742][ T4982] ? __lock_acquire+0x7ea0/0x7ea0 [ 95.815792][ T4982] do_epoll_ctl+0x8b2/0xf40 [ 95.820314][ T4982] __x64_sys_epoll_ctl+0x162/0x1b0 [ 95.825427][ T4982] ? ep_modify+0xa80/0xa80 [ 95.829873][ T4982] ? lockdep_hardirqs_on+0x94/0x140 [ 95.835099][ T4982] do_syscall_64+0x4c/0xa0 [ 95.839523][ T4982] ? clear_bhb_loop+0x60/0xb0 [ 95.844216][ T4982] ? clear_bhb_loop+0x60/0xb0 [ 95.848898][ T4982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.854811][ T4982] RIP: 0033:0x7f3e10f9f559 [ 95.859234][ T4982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.878876][ T4982] RSP: 002b:00007f3e11e12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 95.887286][ T4982] RAX: ffffffffffffffda RBX: 00007f3e11225fa0 RCX: 00007f3e10f9f559 [ 95.895285][ T4982] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 95.903264][ T4982] RBP: 00007f3e11036b20 R08: 0000000000000000 R09: 0000000000000000 [ 95.911231][ T4982] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 95.919295][ T4982] R13: 00007f3e11226038 R14: 00007f3e11225fa0 R15: 00007ffd0d2819c8 [ 95.927288][ T4982] [ 96.031160][ T4984] loop0: detected capacity change from 0 to 64 [ 96.200621][ T4285] XFS (loop4): Unmounting Filesystem [ 96.281519][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 96.517475][ T4997] jffs2: notice: (4997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.725623][ T5004] fuse: Bad value for 'fd' [ 96.786435][ T5006] loop0: detected capacity change from 0 to 512 [ 96.899458][ T5006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 96.938157][ T5006] System zones: 0-7 [ 96.973668][ T5006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.117669][ T5006] EXT4-fs (loop0): shut down requested (0) [ 97.273237][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 97.389050][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 97.396694][ T956] gspca_vc032x: reg_w err -71 [ 97.411909][ T956] vc032x: probe of 2-1:0.0 failed with error -71 [ 97.429664][ T956] usb 2-1: USB disconnect, device number 5 [ 97.544520][ T5040] FAULT_INJECTION: forcing a failure. [ 97.544520][ T5040] name failslab, interval 1, probability 0, space 0, times 0 [ 97.564590][ T5040] CPU: 0 PID: 5040 Comm: syz.2.193 Not tainted syzkaller #0 [ 97.571944][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.582056][ T5040] Call Trace: [ 97.585383][ T5040] [ 97.588340][ T5040] dump_stack_lvl+0x188/0x24e [ 97.593053][ T5040] ? show_regs_print_info+0x12/0x12 [ 97.598285][ T5040] ? load_image+0x410/0x410 [ 97.602929][ T5040] ? __might_sleep+0xd0/0xd0 [ 97.607576][ T5040] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.612671][ T5040] should_fail_ex+0x390/0x4c0 [ 97.617397][ T5040] should_failslab+0x5/0x20 [ 97.621929][ T5040] slab_pre_alloc_hook+0x59/0x300 [ 97.626986][ T5040] ? __kmem_cache_alloc_node+0x19d/0x270 [ 97.632651][ T5040] ? create_filter_start+0x15c/0x2c0 [ 97.638056][ T5040] __kmem_cache_alloc_node+0x4f/0x270 [ 97.643516][ T5040] ? create_filter_start+0x15c/0x2c0 [ 97.648837][ T5040] kmalloc_trace+0x26/0xe0 [ 97.653295][ T5040] create_filter_start+0x15c/0x2c0 [ 97.658453][ T5040] apply_event_filter+0x16c/0x590 [ 97.663533][ T5040] event_filter_write+0xce/0x140 [ 97.668512][ T5040] ? event_filter_read+0x270/0x270 [ 97.673657][ T5040] vfs_write+0x2dc/0x9a0 [ 97.677937][ T5040] ? file_end_write+0x250/0x250 [ 97.682819][ T5040] ? __fget_files+0x28/0x460 [ 97.687051][ T5044] loop4: detected capacity change from 0 to 1024 [ 97.687421][ T5040] ? __fget_files+0x3fc/0x460 [ 97.698449][ T5040] ? __fdget_pos+0x2ae/0x360 [ 97.703068][ T5040] ? ksys_write+0x70/0x260 [ 97.707518][ T5040] ksys_write+0x14d/0x260 [ 97.711886][ T5040] ? __ia32_sys_read+0x80/0x80 [ 97.716694][ T5040] ? lockdep_hardirqs_on+0x94/0x140 [ 97.721923][ T5040] do_syscall_64+0x4c/0xa0 [ 97.726367][ T5040] ? clear_bhb_loop+0x60/0xb0 [ 97.731066][ T5040] ? clear_bhb_loop+0x60/0xb0 [ 97.735772][ T5040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.741786][ T5040] RIP: 0033:0x7eff2f19f559 [ 97.746221][ T5040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.765864][ T5040] RSP: 002b:00007eff2ffcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.774372][ T5040] RAX: ffffffffffffffda RBX: 00007eff2f425fa0 RCX: 00007eff2f19f559 [ 97.782341][ T5040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 97.790304][ T5040] RBP: 00007eff2f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.798278][ T5040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.806245][ T5040] R13: 00007eff2f426038 R14: 00007eff2f425fa0 R15: 00007ffc40cc2298 [ 97.814235][ T5040] [ 98.075756][ T5055] loop2: detected capacity change from 0 to 256 [ 98.162198][ T5059] 9pnet_fd: Insufficient options for proto=fd [ 98.242353][ T26] audit: type=1800 audit(1793139692.654:2): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.198" name="file1" dev="loop2" ino=1048631 res=0 errno=0 [ 98.339593][ T5062] fuse: Bad value for 'fd' [ 98.509724][ T5071] loop4: detected capacity change from 0 to 512 [ 98.542572][ T5071] ext4: Unknown parameter 'dont_measure' [ 98.795426][ T5075] fuse: Bad value for 'fd' [ 98.890982][ T5078] loop4: detected capacity change from 0 to 164 [ 100.021880][ T4399] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.214883][ T4399] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.225164][ T4399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.235653][ T4399] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.245363][ T4399] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.262599][ T4399] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.275007][ T4399] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.286642][ T4399] usb 2-1: Product: syz [ 100.291392][ T4399] usb 2-1: Manufacturer: syz [ 100.310850][ T4399] cdc_wdm 2-1:1.0: skipping garbage [ 100.321573][ T4399] cdc_wdm 2-1:1.0: skipping garbage [ 100.346506][ T4399] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 100.353983][ T4399] cdc_wdm 2-1:1.0: Unknown control protocol [ 100.515043][ T4399] usb 2-1: USB disconnect, device number 6 [ 100.648924][ T5115] loop0: detected capacity change from 0 to 512 [ 100.656176][ T5115] ext4: Unknown parameter 'dont_measure' [ 100.955693][ T5119] loop0: detected capacity change from 0 to 164 [ 101.525571][ T4477] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.541189][ T5116] loop0: detected capacity change from 0 to 512 [ 101.555404][ T5116] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.562059][ T5116] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.221: casefold flag without casefold feature [ 101.577268][ T5116] EXT4-fs (loop0): Remounting filesystem read-only [ 101.583951][ T5116] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.221: couldn't read orphan inode 15 (err -117) [ 101.606741][ T5116] EXT4-fs (loop0): Remounting filesystem read-only [ 101.613401][ T5116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.776158][ T4399] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.821127][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 101.964127][ T4399] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.977441][ T4399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.000274][ T4399] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.029672][ T4399] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.056790][ T4399] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.072011][ T4399] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.080362][ T4399] usb 2-1: Product: syz [ 102.089054][ T4399] usb 2-1: Manufacturer: syz [ 102.100228][ T4399] cdc_wdm 2-1:1.0: skipping garbage [ 102.111357][ T4399] cdc_wdm 2-1:1.0: skipping garbage [ 102.134978][ T4399] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 102.149977][ T4399] cdc_wdm 2-1:1.0: Unknown control protocol [ 102.659462][ C1] cdc_wdm 2-1:1.0: unknown notification 72 received: index 13556 len 60644 [ 102.668863][ C1] cdc_wdm 2-1:1.0: unknown notification 180 received: index 50839 len 14243 [ 102.677948][ C1] cdc_wdm 2-1:1.0: unknown notification 7 received: index 20479 len 56425 [ 102.700532][ C1] cdc_wdm 2-1:1.0: unknown notification 188 received: index 32154 len 65185 [ 102.713049][ C1] cdc_wdm 2-1:1.0: unknown notification 188 received: index 24877 len 21782 [ 102.728241][ C1] cdc_wdm 2-1:1.0: unknown notification 177 received: index 4597 len 64986 [ 102.737448][ C1] cdc_wdm 2-1:1.0: unknown notification 230 received: index 17747 len 50404 [ 102.912653][ T5165] x86/PAT: syz.2.238:5165 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 102.966695][ T2170] usb 2-1: USB disconnect, device number 7 [ 103.592954][ T5191] loop1: detected capacity change from 0 to 512 [ 103.637780][ T5191] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.495211][ T129] hid-generic 0003:0001:0001.0002: No inputs registered, leaving [ 104.549253][ T129] hid-generic 0003:0001:0001.0002: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 104.695109][ T5214] fido_id[5214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.087824][ T5225] loop1: detected capacity change from 0 to 512 [ 105.115241][ T5225] ext4: Unknown parameter 'dont_measure' [ 105.426950][ T5230] loop1: detected capacity change from 0 to 164 [ 105.540911][ T5230] loop1: detected capacity change from 0 to 512 [ 105.665346][ T5230] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.674752][ T5230] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.260: casefold flag without casefold feature [ 105.697259][ T5230] EXT4-fs (loop1): Remounting filesystem read-only [ 105.704249][ T5230] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.260: couldn't read orphan inode 15 (err -117) [ 105.723901][ T5230] EXT4-fs (loop1): Remounting filesystem read-only [ 105.730620][ T5230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.994276][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 107.050049][ T5257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.269'. [ 107.410637][ T5286] loop2: detected capacity change from 0 to 2048 [ 107.454700][ T5286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.684378][ T5292] FAULT_INJECTION: forcing a failure. [ 107.684378][ T5292] name failslab, interval 1, probability 0, space 0, times 0 [ 107.732731][ T5292] CPU: 0 PID: 5292 Comm: syz.1.277 Not tainted syzkaller #0 [ 107.740075][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.750154][ T5292] Call Trace: [ 107.753450][ T5292] [ 107.756370][ T5292] dump_stack_lvl+0x188/0x24e [ 107.761037][ T5292] ? show_regs_print_info+0x12/0x12 [ 107.766221][ T5292] ? load_image+0x410/0x410 [ 107.770739][ T5292] ? __lock_acquire+0x7ea0/0x7ea0 [ 107.775754][ T5292] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 107.781640][ T5292] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 107.788321][ T5292] should_fail_ex+0x390/0x4c0 [ 107.793010][ T5292] should_failslab+0x5/0x20 [ 107.797543][ T5292] slab_pre_alloc_hook+0x59/0x300 [ 107.802564][ T5292] ? percpu_ref_init+0xc0/0x340 [ 107.807410][ T5292] __kmem_cache_alloc_node+0x4f/0x270 [ 107.812779][ T5292] ? percpu_ref_init+0xc0/0x340 [ 107.817625][ T5292] ? cgroup_setup_root+0xa90/0xa90 [ 107.822728][ T5292] kmalloc_trace+0x26/0xe0 [ 107.827155][ T5292] percpu_ref_init+0xc0/0x340 [ 107.831837][ T5292] cgroup_apply_control_enable+0x428/0xb00 [ 107.837657][ T5292] cgroup_mkdir+0xc7f/0xe70 [ 107.842165][ T5292] ? css_task_iter_end+0x280/0x280 [ 107.847291][ T5292] ? kernfs_iop_permission+0x26d/0x350 [ 107.852752][ T5292] ? css_task_iter_end+0x280/0x280 [ 107.857861][ T5292] kernfs_iop_mkdir+0x23d/0x3d0 [ 107.862717][ T5292] vfs_mkdir+0x386/0x570 [ 107.866967][ T5292] do_mkdirat+0x1d8/0x440 [ 107.871295][ T5292] ? vfs_mkdir+0x570/0x570 [ 107.875732][ T5292] __x64_sys_mkdirat+0x85/0x90 [ 107.880508][ T5292] do_syscall_64+0x4c/0xa0 [ 107.884923][ T5292] ? clear_bhb_loop+0x60/0xb0 [ 107.889594][ T5292] ? clear_bhb_loop+0x60/0xb0 [ 107.894265][ T5292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.900183][ T5292] RIP: 0033:0x7f5401b9f559 [ 107.904593][ T5292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.924202][ T5292] RSP: 002b:00007f5402997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 107.932613][ T5292] RAX: ffffffffffffffda RBX: 00007f5401e25fa0 RCX: 00007f5401b9f559 [ 107.940575][ T5292] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 107.948544][ T5292] RBP: 00007f5401c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.956509][ T5292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.964471][ T5292] R13: 00007f5401e26038 R14: 00007f5401e25fa0 R15: 00007ffc91625da8 [ 107.972471][ T5292] [ 108.348700][ T5315] loop1: detected capacity change from 0 to 512 [ 108.378406][ T5315] EXT4-fs: Ignoring removed bh option [ 108.409582][ T5315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.477298][ T5315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.503194][ T5315] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.694956][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 109.022292][ T26] audit: type=1326 audit(1793139703.424:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2f19f559 code=0x7fc00000 [ 109.402505][ T5330] loop1: detected capacity change from 0 to 1024 [ 109.500458][ T5330] EXT4-fs: Ignoring removed bh option [ 109.514955][ T5330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.806422][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 110.334140][ T5369] loop1: detected capacity change from 0 to 256 [ 110.375303][ T5369] exfat: Deprecated parameter 'utf8' [ 110.447458][ T5369] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 110.781227][ T5371] syz.1.306 uses obsolete (PF_INET,SOCK_PACKET) [ 110.838025][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 111.019603][ T26] audit: type=1326 audit(1793139705.434:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.084389][ T26] audit: type=1326 audit(1793139705.434:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.183509][ T26] audit: type=1326 audit(1793139705.434:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.266487][ T26] audit: type=1326 audit(1793139705.434:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.338800][ T5367] loop4: detected capacity change from 0 to 40427 [ 111.345531][ T26] audit: type=1326 audit(1793139705.434:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.369225][ T5367] F2FS-fs (loop4): invalid crc value [ 111.378276][ T5380] TC_ACT_REPEAT abuse ? [ 111.397183][ T5367] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.478394][ T26] audit: type=1326 audit(1793139705.434:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.558360][ T5367] F2FS-fs (loop4): Start checkpoint disabled! [ 111.599771][ T26] audit: type=1326 audit(1793139705.464:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.634775][ T5367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 111.691915][ T26] audit: type=1326 audit(1793139705.464:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 111.782140][ T26] audit: type=1326 audit(1793139705.464:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.3.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d0d9f559 code=0x7ffc0000 [ 112.016619][ T4285] syz-executor: attempt to access beyond end of device [ 112.016619][ T4285] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 112.066869][ T4285] syz-executor: attempt to access beyond end of device [ 112.066869][ T4285] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 112.295866][ T9] kworker/u4:0: attempt to access beyond end of device [ 112.295866][ T9] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 112.550594][ T5388] loop0: detected capacity change from 0 to 4096 [ 112.733054][ T5409] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.788808][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.936607][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.191475][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.374913][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.461404][ T5432] loop1: detected capacity change from 0 to 164 [ 114.587828][ T5432] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 114.794154][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.807887][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.816994][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.825838][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.833678][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 114.841850][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.584070][ T5451] loop1: detected capacity change from 0 to 8192 [ 115.744398][ T5451] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.225505][ T9] device hsr_slave_0 left promiscuous mode [ 116.271284][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.303411][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.313441][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.321231][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.347141][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 116.355729][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.415237][ T9] device hsr_slave_1 left promiscuous mode [ 116.421578][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.482263][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.194291][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.257276][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.282118][ T4477] udevd[4477]: Failed to create symlink /run/udev/watch/206: No such file or directory [ 117.302966][ T9] device bridge_slave_1 left promiscuous mode [ 117.318987][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.337159][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 117.337174][ T26] audit: type=1804 audit(1793139711.744:30): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.408033][ T9] device bridge_slave_0 left promiscuous mode [ 117.419528][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.434126][ T26] audit: type=1804 audit(1793139711.794:31): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.494391][ T26] audit: type=1804 audit(1793139711.804:32): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.541127][ T26] audit: type=1804 audit(1793139711.804:33): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.574364][ T9] device veth1_macvtap left promiscuous mode [ 117.581148][ T9] device veth0_macvtap left promiscuous mode [ 117.618599][ T9] device veth1_vlan left promiscuous mode [ 117.624778][ T26] audit: type=1804 audit(1793139711.804:34): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.632493][ T9] device veth0_vlan left promiscuous mode [ 117.678898][ T26] audit: type=1804 audit(1793139711.804:35): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.712748][ T26] audit: type=1804 audit(1793139711.804:36): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.736422][ T26] audit: type=1804 audit(1793139711.814:37): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.784766][ T26] audit: type=1804 audit(1793139711.814:38): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.842670][ T26] audit: type=1804 audit(1793139711.814:39): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 117.876699][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.887742][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.893781][ T5498] ip_tables: iptables: counters copy to user failed while replacing table [ 117.903599][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.917830][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.928445][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.935890][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.847718][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.873966][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.884870][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.904169][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.911649][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.920535][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.326464][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.389486][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.449099][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.522314][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.076287][ T9] bond0 (unregistering): Released all slaves [ 120.146145][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.155800][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.175518][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.185134][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.199676][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.209381][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.321061][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.453964][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.608662][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.622882][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.651977][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.660456][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.688455][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.696078][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.706367][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.753233][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.767061][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.776723][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.793217][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.817523][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.824879][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.889994][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.346632][ T26] kauditd_printk_skb: 3511 callbacks suppressed [ 122.346647][ T26] audit: type=1804 audit(1793139716.764:3551): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.436046][ T26] audit: type=1804 audit(1793139716.804:3552): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.473614][ T26] audit: type=1804 audit(1793139716.804:3553): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.508813][ T26] audit: type=1804 audit(1793139716.814:3554): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.546622][ T26] audit: type=1804 audit(1793139716.814:3555): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.621189][ T26] audit: type=1804 audit(1793139716.814:3556): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.721862][ T26] audit: type=1804 audit(1793139716.814:3557): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.791847][ T26] audit: type=1804 audit(1793139716.814:3558): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.887678][ T26] audit: type=1804 audit(1793139716.814:3559): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 122.979378][ T26] audit: type=1804 audit(1793139716.814:3560): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 123.383779][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.394000][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.402472][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.418841][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.431530][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.440106][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.525082][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.535826][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.545133][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.554071][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.572458][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.579970][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.936742][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'. [ 124.435823][ T9] device hsr_slave_0 left promiscuous mode [ 124.447836][ T9] device hsr_slave_1 left promiscuous mode [ 124.455388][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.467698][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.476287][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.490358][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.499215][ T9] device bridge_slave_1 left promiscuous mode [ 124.510837][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.537812][ T9] device bridge_slave_0 left promiscuous mode [ 124.544309][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.600511][ T9] device veth1_macvtap left promiscuous mode [ 124.608150][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.619820][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.628411][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.636895][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.647091][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.654941][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.696223][ T9] device veth0_macvtap left promiscuous mode [ 124.713323][ T9] device veth1_vlan left promiscuous mode [ 124.725686][ T9] device veth0_vlan left promiscuous mode [ 125.524702][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.544520][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.554296][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.569349][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.579359][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.589776][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.716038][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.727805][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.735880][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.745156][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.754713][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.764329][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.638475][ T9] team0 (unregistering): Port device team_slave_1 removed [ 126.727359][ T9] team0 (unregistering): Port device team_slave_0 removed [ 126.732512][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.754761][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.775385][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.775514][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.798040][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.805572][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.812875][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.063057][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.353866][ T26] kauditd_printk_skb: 3295 callbacks suppressed [ 127.353879][ T26] audit: type=1804 audit(1793139721.774:6856): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.407496][ T26] audit: type=1804 audit(1793139721.814:6857): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.430883][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.450088][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.458492][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.473088][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.480298][ T26] audit: type=1804 audit(1793139721.814:6858): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.492237][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 127.509005][ T26] audit: type=1804 audit(1793139721.814:6859): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.538319][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.545587][ T26] audit: type=1804 audit(1793139721.814:6860): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.592362][ T26] audit: type=1804 audit(1793139721.814:6861): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.619997][ T26] audit: type=1804 audit(1793139721.814:6862): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.656916][ T26] audit: type=1804 audit(1793139721.814:6863): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.680113][ T26] audit: type=1804 audit(1793139721.814:6864): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 127.713042][ T26] audit: type=1804 audit(1793139721.814:6865): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/50/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 128.036232][ T9] bond0 (unregistering): Released all slaves [ 128.354897][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.369715][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.378724][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.387932][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.395907][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.404985][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.139589][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.151154][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.169932][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.180699][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.188377][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.197281][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.209808][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.239623][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.252348][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.264984][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.274435][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.284272][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.469439][ T4342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.617972][ T4342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.718891][ T4342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.809785][ T4342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.842440][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.850738][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.861279][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.883103][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.891609][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.900125][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.699426][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.700689][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.720634][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.729775][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.746115][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.756619][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.756733][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.772981][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.781451][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.789460][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.798347][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.808605][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.427408][ T5718] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 131.984181][ T4342] device hsr_slave_0 left promiscuous mode [ 131.993746][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.005125][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.016265][ T4342] device hsr_slave_1 left promiscuous mode [ 132.022042][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.041046][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.054855][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.062233][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.097762][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.115003][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.127987][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.136371][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.137467][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.166607][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.167202][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.183530][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.188739][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.198926][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.273967][ T4342] device bridge_slave_1 left promiscuous mode [ 132.300350][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.363089][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.376030][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.385773][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.395909][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.403617][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.410952][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.439939][ T4342] device bridge_slave_0 left promiscuous mode [ 132.456597][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.604921][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.611342][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.685839][ T4342] device veth1_macvtap left promiscuous mode [ 132.712234][ T4342] device veth0_macvtap left promiscuous mode [ 132.718379][ T4342] device veth1_vlan left promiscuous mode [ 132.752667][ T4342] device veth0_vlan left promiscuous mode [ 133.157882][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.177559][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.186516][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.195630][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.204272][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 133.211513][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.498222][ T4342] team0 (unregistering): Port device team_slave_1 removed [ 133.552611][ T4342] team0 (unregistering): Port device team_slave_0 removed [ 133.682947][ T4342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.769473][ T4342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.969433][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.978088][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.996360][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.014501][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.023000][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.031397][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.083096][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.097289][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.114014][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.124505][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.133442][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.140725][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.425661][ T4342] bond0 (unregistering): Released all slaves [ 134.744948][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.754957][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.765082][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.774554][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.782177][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.789428][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.957215][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.967643][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.975899][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.987731][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.011990][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.027447][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.375388][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.387749][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.396307][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.405675][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.414037][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.421333][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.740847][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.751382][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.759837][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.769425][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.778965][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.786674][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.831275][ T5809] TC_ACT_REPEAT abuse ? [ 135.935189][ T5807] device syzkaller0 entered promiscuous mode [ 136.016680][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.026069][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.035408][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.044376][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.055351][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.062994][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.530417][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.548767][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.567846][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.588441][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.612064][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.621614][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.174920][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.185383][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.207485][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.222490][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.236686][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.250253][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.854629][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.865217][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.883434][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.898747][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.913686][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.921025][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.475624][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.486450][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.497657][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.514144][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.521726][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.529332][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.902546][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.911006][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.921512][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.930734][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.938919][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.946199][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.298283][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.306793][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.314772][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.326124][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.333742][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.341359][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.699603][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.710855][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.720138][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.728876][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.736502][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.744932][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.053063][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.062343][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.071421][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.080570][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.089986][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.097836][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.451719][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.460381][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.470256][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.478942][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.488543][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.495836][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.810891][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.820227][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.837617][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.845992][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.856308][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.865075][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.179050][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.191587][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.201042][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.212086][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.219750][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.227899][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.672926][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.681452][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.690948][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.698679][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.708245][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.715563][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.036337][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.047012][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.057451][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.066319][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.073981][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.081386][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.353411][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.363080][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.372159][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.379955][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.389837][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.397123][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.716718][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.726872][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.736133][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.744395][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.752157][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.759383][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.257262][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.265580][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.274951][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.284795][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.292640][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.299862][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.675316][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.685358][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.695965][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.703814][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.711335][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.719947][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.036407][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.046355][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.055785][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.066582][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.074279][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.081509][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.425148][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.433533][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.442234][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.450049][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.459045][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.467860][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.780118][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.789981][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.799963][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.809533][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.817357][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.825381][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=357 state=3 status=67 (errno 32: Broken pipe)