last executing test programs: 32m2.352734409s ago: executing program 32 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x21) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x8000000) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2404, &(0x7f0000000140)={[], [], 0x2e}, 0x84, 0x456, &(0x7f0000000840)="$eJzs28tvG8UfAPDvbh799fVrKOXRBxAoiIhH0qQFeuACAqkXJCQ4lGNI06rUbVATJFpVNCBUjqh/AXBE4i/gBBcEnEBc4Y6QKtQLhQNatPZu6iR2sB0nTvHnI20y4x175ru7Y8/O2AH0rdH8TxKxKyJ+jog9tezyAqO1f7duXpn58+aVmSSy7LXfk2q5P25emSmLls/bWWTG0oj0wyQONqh3/tLlc9OVyuzFIj+xcP7tiflLl58+e376zOyZ2QtTx48fOzr53LNTz3Qlzt15Ww+8N3do/4k3rr8yc/L6m999kbd3V7G/Po6IGO5GnaMxuvxY1nmsGxVsIbvr0slgDxtCWwYiYnBZ/nZuT7z8QU8aBWyKLMuybaseHSgTixnwH5ZEr1sA9Eb5QZ/f/5bbJg4/eu7GC7UboDzuW8VW2zMYaVFmaMX9bTeNRsTJxb8+ybdYPQ+xWrK4QS0BAPrFV/n456lG47807q0r9/9ibWgkIu6KiL0RcXdE7IuIeyKqZe+LiPvbrH90RX71+OfH7R0F1qJ8/Pd8sba1fPxXjv5iZKDI7a7GP5ScPluZPVIck7EY2pbnJ9eo4+uXfvq42b768V++5fWXY8GiHb8NrpigOzW9ML2emOvdeD/iwGCj+JOltav8//6IONDB6+fH7OwTnx9qtv/f419DF9aZss8iHq+d/8VYEX8pWXt9cuJ/UZk9MlFeFat9/8O1V5vVv674uyA//zsaXv9L8Y8k9eu18+3Xce2Xj5re03R6/Q8nr1fT5ULtu9MLCxcnI4aL+6Nlj0/dfm6ZL8vn8Y8dbtz/90b8/WnxvIMRkV/ED0TEgxHxUNH2hyPikYg4vEb837746Fudx7+x8vhPtXX+208MnPvmy2b1t3b+j1VTY8Ujrbz/tdrA9Rw7AAAAuFOk1e/AJ+n4UjpNx8drc5v7YkdamZtfePL03DsXTtW+Kz8SQ2k507Wnbj50spgbLvNTK/JHq/PGWZZl26v58Zm5ykatqQOt2dmk/+d+Heh164AN19Y6WrNftAF3JL/XhP6l/0P/0v+hf+n/0L8a9f+rEbd60BRgk/n8h/6l/0P/0v+hf+n/0JfW87v+iOZl9p5YzytvjcRwbEZdA1sg0k4SkW6JZnSWSLdGM2qJbRHRauGrsVkN6/U7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHf8EwAA//+NR+bC") 31m32.637353669s ago: executing program 33 (id=134): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x62040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000340)={'nat\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x8, 0x1a]}, &(0x7f0000000100)=0x54) 27m8.977233134s ago: executing program 34 (id=539): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xbe562c8f84d38897, 0x49) 27m4.823863425s ago: executing program 35 (id=525): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000000380), 0x300, 0x78c) 24m28.462641525s ago: executing program 36 (id=644): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) connect$can_bcm(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x191c) 23m10.59894019s ago: executing program 37 (id=682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x2, 0x5, 0x430, 0x1c0, 0x290, 0xffffffff, 0x0, 0x0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@remote, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [0x0, 0xff], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x290}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 15m33.420074248s ago: executing program 38 (id=1418): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x7ff, &(0x7f0000000000)) 14m41.972662196s ago: executing program 39 (id=1516): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 13m37.327104455s ago: executing program 40 (id=1615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11m47.512743403s ago: executing program 41 (id=1772): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, 0x0) 10m38.150887271s ago: executing program 2 (id=1843): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x400000000001, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000003f80)) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x432) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='wg0\x00', 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 10m34.779649478s ago: executing program 2 (id=1848): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000b2e000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r1, 0xbdd3d000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x38, 0x701, 0x0, 0xffffbfff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20008800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 10m14.404562767s ago: executing program 42 (id=1848): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000b2e000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r1, 0xbdd3d000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x38, 0x701, 0x0, 0xffffbfff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20008800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 9m36.886279391s ago: executing program 3 (id=1936): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m32.843071242s ago: executing program 3 (id=1938): r0 = inotify_init() syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239fd4"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet6(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m27.416628832s ago: executing program 3 (id=1945): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800004, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 9m26.283806658s ago: executing program 3 (id=1947): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m24.567370278s ago: executing program 3 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) 9m21.972746284s ago: executing program 3 (id=1955): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 9m18.238208629s ago: executing program 4 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) 9m14.32300543s ago: executing program 4 (id=1967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x44, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x11dd}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 9m13.452365741s ago: executing program 4 (id=1969): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1da40006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a800080008000a4004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300", 0xd5}], 0x1}, 0x40000c0) 9m12.960845621s ago: executing program 1 (id=1971): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xa0, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xb}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, &(0x7f0000000540), 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000d40)={0x14, 0x0, &(0x7f0000000c40)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "01aa8fa33c0c99d36e35e8cbe958b8df4a4f557c4af04946d93ea9c6b610cc1dc4231a1e7fc5602acd18f58376dc2ae8ecd4b73627a5b9905551"}}}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 9m12.530208069s ago: executing program 4 (id=1972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4000) 9m11.649460436s ago: executing program 4 (id=1973): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@abort}, {@dioread_lock}, {@bh}, {@nouid32}]}, 0x1, 0x55e, &(0x7f0000000980)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 9m9.575896871s ago: executing program 1 (id=1975): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x400000000001, 0x84) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000003f80)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000200)=0x432) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='wg0\x00', 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 9m9.454528452s ago: executing program 4 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) 9m6.99715581s ago: executing program 1 (id=1978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x44, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x11dd}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 9m6.699870003s ago: executing program 43 (id=1955): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 9m5.620561829s ago: executing program 1 (id=1980): futex(&(0x7f000000cffc), 0x5, 0x10000000, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0x8, 0x0, &(0x7f0000001040)) tgkill(r1, r1, 0x6) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) pread64(r0, &(0x7f00000003c0)=""/179, 0xb3, 0x40) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0xb2d0, 0x0, 0x1, 0x106}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/19, 0x13}, {0x0}], &(0x7f0000000200)=[0xba], 0x11a}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50) syz_emit_ethernet(0x16, 0x0, 0x0) 9m0.784201385s ago: executing program 1 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4000) 8m55.341639926s ago: executing program 1 (id=1984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x880) 8m53.643286037s ago: executing program 44 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) 8m39.986159851s ago: executing program 45 (id=1984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x880) 5m51.818233157s ago: executing program 7 (id=2223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m49.643748373s ago: executing program 7 (id=2228): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002042, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x488, &(0x7f0000000900)="$eJzs3M1rXFUbAPDn3iT9bpP3tVZbW41WsfiRNGnVLlyoKLhQEHRRlzFJa+20kSaCLUGjSF1Kwb24FPwL3LkRdSGCWwWXUigahKauIvcrmU4maZImGZv5/WAy58y9M+c8995z59xzcieAttWb/Uki0jLfXWRvXqG3eJqZnhy+MT05nMTs7Ot/Jvl616cnh6tVq/ftLDNH0oj0kySeSxaWO37x0tmhWm30Qpnvnzj3bv/4xUtPnjk3dHr09Oj5wRMnjh8beObpwafWJM4srusHPhg7uP/lN6+8Onzyyls/fJ1Va9+hYnl9HLd0o0lATfRmW+2v2VzjskdWUPc7we66dNLZwoqwIh0Rke2uroj4NbqjI+Z3Xne89HFLKwesq+y7aevii6dmgU0siVbXAGiN6os+u/6tHhvU9fhPuPZ8xJYyPTM9OTwzF3/n3JhI1zqW3xsRJ6f++SJ7xErHIQAAViHv2zzRrP+Xxr78uZjr2FPOofRExP8i4v8RcVdE7I2IuyPyde+JiHuLN892L7P83ob8wv5PerVpnddI1v97tq7vN1MXf/nU01HmdufxdyWnztRGj5bb5Eh0bc3yA0uU8e2Lv3y22LL6/l/2yMqv+oJlBa52NgzQjQxNDK3VRrj2UcSBzmbxJ3MzAdkRsD8iDqzso/dUiTOPfXVwsZVuHf8S1mCeafbLiEeL/T8VDfFXkqXnJ/u3RW30aH91VCz048+XX1us/NuKfw1k+3/Hzcd/wxrdfyfFfG1X1GqjF8ZXXsbl3z5d9Jpmtcf/luSN2BURP71dvPb+0MTEhYGILckreb66pstfH5x/b5Wv1s/iP3J44fGfRpqf46Lc//dFRHYQH4qI+yPigbLuD0bEQxFxeIn4v3/h4XeWiD+JJFq6/0eanv/mjv+epH6+fhWJjrPffbPYjPny9v/xmMrPtYX8/HcLy63gbW4+AAAAuCOkEbErkrSvSPfuijTt6yv+h39v7EhrY+MTj58ae+/8SOTjLT3RlVYjXd1146EDyVT5iUV+sBwrrpYfK8eNP+/Ynuf7hsdqIy2OHdrdzpvbf1TtP/NHR6trB6w792tB+2ps/2mL6gFsvOV8/7sWgM2pSfvf3op6ABvP9T+0r2bt/8OGvP4/bE4L2//vTX6yDtiM9P+hfWn/0L60f2hLt3Nf/+oT1c0Cq/+cbcu+w79dEtUvXqxnWdtj/pVIWx5yGyWyFrOxhc7/hgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd7N8AAAD//yJo5fc=") syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000004fc0)=ANY=[@ANYBLOB="1201500200000008410e4a42400001020301090269000301009009080b01060105209e0904000000010120000901022000090401010101022000090501094000037f090825018303074e00090402faff0002201e090402010101022800090582094000057f04082501800c05500a00"/123], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40084) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000280)) ftruncate(r1, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") accept4(0xffffffffffffffff, &(0x7f0000000440)=@nl, &(0x7f00000004c0)=0x80, 0x80800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) read$FUSE(r1, &(0x7f0000001500)={0x2020}, 0x2020) sendfile(r1, r1, 0x0, 0x800000009) 5m43.651496225s ago: executing program 7 (id=2235): prlimit64(0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xfffffffc}, 0x143}, 0x31) 5m28.98966586s ago: executing program 7 (id=2253): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') unshare(0x6020400) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) 5m28.05954778s ago: executing program 7 (id=2256): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESOCT=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f0000001000)="$eJzs3EtvG1UUAODjpGnpgxIhFuw6UoWUSLVVpw/BrkArHiJVVGDBChzbsdzanih2nJAVC5aIBf8EgcSKJb+BBWt2iAWIHRLIcyfQ8JCQ4sSk+T5pfOZeX58516oqnZnIAZxai9kvP1XicpyPiPmIuBRRnFfKo3Anhecj4kpEzD12VMr5PybORsSFiLg8SZ5yVsq3Prs2vnrrxzd//vrbc2cufv7Vd7PbNTBrL0REfzOd7/RTzDspPiznG+NuEfs3x2VMb/QfleM8xZ32epFhp7G/rlHEG520Pt/cHk7iRq/RnMROd6OY3xykCw7Hnf08xQceNraKcau9XsTuMC9iZy/VtbuX/m/bG45SnlaZ78MifYxG+zHNt3fbaT+bj4rYHIzK+ZQ3b7V3J3FcxvJy0cx7raKO9cN80/9vb3UH27vZuL017OaD7Fat/mKtfrta38pb7VH7ZrXRb92+mS11epNl1VG70b/TyfNOr11r5v3lbKnTbFbr9Wzpbnu92xhk9XrtRu169dZyeXYte+3+u1mvlS1N4ivdwfao2xtmG/lWlj6xnK3Ubry0nF2tZ2+vrmVrD+7dW1175/27791/efWNV8tFfysrW1q5vrJSrV+vrtSXT9H+Py6LnuL+4VAqsy4A4OTR/wOzcHT9/9aDiKPv/0P/PxUnqv897f3/EewfDkX/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwan2/8MXrxcliGl8s558up54tx5WImIuI3/7BfJw9kHO+zLPwL+sX/lLDN5UoMkyuca48LkTEnfL49Zmj/hYAAADgyfXlR1c+Td16elmcdUEcp3TTZu7SB1PKV4mIhcUfppRtbvLy3JSSFf++z8TulLIVN7DOTClZuuU2tWz/yfyB8NRjoZLC3LGWAwAAHIuDncDxdiEAAAAcp09mXQCzUYn9R5n7z4KLv7z/84Hg+QMjAAAA4ASqzLoAAAAA4MgV/b/f/wMAAIAnW/r9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB3du4mN20gjgPo3wYX6IeKqu57le7gGD1Cl11WHKCX4ABd0Cv0ApyB7HKECCLsCYEIRZE8NiF6TzLDGPNjxoLFzKABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3VSr+b/f3/60zdnu2snTGwAAAOCcTbWa10+mTf1DOv8pnfqS6kVElBFxbuw+iHcnmYOUUz1e//f4+upJG/5H1An7zxil431EfE/H3eeu7wIAAABcsdHzL68Xy1kzWm8epv20itehmbQpP/7IlFdERDW9zZRW7vO+Zgqrv9/D+JUprZ7AGmcKa6bchrnSXqT+uR9m7cZHRdEU5dm3HRqZre8AAECPBidFv6MQAAAA+vTz0g3gMop4WMo8LAWmPwyk5b3JSQ0AAAC4QsWlGwAAAAB0rh7/97T/3y73/n+T3HcDAAAA3qhm/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6tKlW8/ViOWubs921k6c3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKmpSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXM/r3FUcQDA38zsbH+ouEbZQ0QUPOjFbre1tTfxoAQP/glCSLc1duuPNgdbipiLN8m5F9GjiKDEW/+Hnlvopd562EMFz8qbnclO0oCr4swm+XzgzfvuY5j3fbMQ8p03CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZvDOLs3joTeO0HLv3+NZa7O/v6aM7Ww+WY4tx0mTSB8NL9Q9Jv71EAAAAODqyqr4PITzMt1din/aK+j+vzok1/3fPTOOqnt9b91d9VfvH9usvj17Ymag3nSde9NL6eHT6yVQ6/98qF9uzf3tGp7jzxbOXrPhC0vc3n5/kx+P9TL65e/fdbnFrjzWRLQDwb5yq+jKofh+K/bDNxAA4Mjq1wruq/7NeuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGGyGZ6q4iSEsNyZxdH9x7fW9uvvbD1Yrtr527e3wleza8ZL5CGES+vj0elGV7PYrt+4eWV1PB5daz54OYTQ1uxvl8u/8uEcJ4eweyQLe0cEixyk5Ze9KPkcjKDFH0oAABxKedliXf8w316JY8lSCH9+v7v+f60Whznr/0cfnb9Xn6te/w8bW+HiG2xc/Wxw/cbNN9avrl4eXR598uaZ4VvDsxfOnbswKJ6VDDwxAQAA4L/plq1e/6dLT+7/n6zFYc76//Nvh1/W58rU//uabfq1nQkAAMDR9twrf/ye7DOedLvhi9WNjWvD6XHn85npsYVU/7FjZavX/9lS21kBAAAATZhsJrv2/y/W4jDn/v/TP7z4U/2aWQjhRLn/f2rt0/HF5paz0Jr4c+K21wgAAEC7TpStvv+fF+//pzuvPKQhhNdfncblvwGcq/7P3vv6x/pc9ff/zza3xIWU9qf3o+j7IXT6bWcEAADAYXa8bLHY/y3fXvn455MfdL3/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANC0vwIAAP//PJY89w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) 5m25.637777341s ago: executing program 7 (id=2259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 5m22.429911194s ago: executing program 8 (id=2265): r0 = socket$packet(0x11, 0x3, 0x300) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/25, 0x19) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) sendmmsg(r6, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x6) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000040)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) 5m16.093620938s ago: executing program 8 (id=2270): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000c40)='map_files\x00') getdents(r0, 0xfffffffffffffffd, 0x3b) 5m12.868601316s ago: executing program 8 (id=2275): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="ed129a93b8cf4746fd3475756f9d20ff09390d3e9feb7567844b444a384054cd563eb0d557f2387292cb22b4c7eb7fd4348f6e6f4f2d523a3f0f383720", 0x3d}], 0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) pwrite64(r0, &(0x7f000009dd80)='\"', 0x1, 0x9000) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) unshare(0x20040600) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) unshare(0x12010200) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(r5, 0xfffffffd) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) write$cgroup_pid(r6, &(0x7f0000000240), 0xfdef) 5m7.533767747s ago: executing program 46 (id=2259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 5m7.340390065s ago: executing program 8 (id=2280): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m3.390158764s ago: executing program 8 (id=2285): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r1, r0, 0x0, 0x3ffff) 4m59.881192685s ago: executing program 8 (id=2290): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x4, 0x44d, &(0x7f0000000900)="$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") sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffd, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m56.589753777s ago: executing program 47 (id=2290): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x4, 0x44d, &(0x7f0000000900)="$eJzs3MtvG0UYAPDPdpw0fZBQyqOhhUBBRDySJn3QA5cikDiAhASHIk4hSatQt0FNkGgVQeAQjqgSd8QRib+AC+WCgBMSV7gjpAjl0sLJaO3d1E3sJE6cuNS/n7TJjGesmW93xx7Peh1AxxpM/uQi9kfE7xHRV83eWWGw+u/W8vzEP8vzE7kol9/6O1epd3N5fiKrmj1vXzVTLq/T7uK7EeOl0tSVND8yd+mDkdmr116YvjR+YerC1OWxM2dOnjjafXrsVEviTOK6OfDxzJHDr71z/Y2Jc9ff+/nbpL/70/LaOFplsLp363q61Y212YGadK6rjR2hKYWISA5XsTL++6IQvStlffHqZ23tHLCjyuV8uadx8UIZuIclE3WgE2Vv9Mnn32zbpanHXWHpbKysY9xKt2pJV+TTOsX0M9JOGIyIcwv/fpVssUPrEAAAtW6cjYjn683/8vFQTb370mso/RFxf0QcjIgHIuJQRDwYUan7cEQ80mT7q6+QrJ3/lPu2FNgmJfO/l9JrW3fO/7LZX/QX0tyBSvzF3Pnp0tTxdJ8MRbEnyY+u08YPr/z2RaOy2vlfsiXtZ3PBtB9/da1aoJscnxvfTsy1lj6NGOiqF39uZc6bzI8PR8TAFtuYfvabI43K+jeMfx0tmJSXv454pnr8F2JV/Jlcw+uToy+eHjs1sidKU8dHsrNirV9+XXyzUfsbH/+dtXSjHHvrnv8r8ffn9kTMXr12sXK9drb5Nhb/+LzhZ5qtnv/dubcr6e70sY/G5+aujEZ0515f+/jY7edm+ax+cv4PHas//g/G7T3xaEQkJ/HRiHgsIh5P+/5ERDwZEcfWif+nl596v/n411mVb6Ek/smNjn/UHv/mE4WLP37XfPyZ5PifrKSG0kc28/q32Q5uZ98BAADA/0W+8h34XH54JZ3PDw9Xv8N/KPbmSzOzc8+dn/nw8mT1u/L9UcxnK119Neuho+laXpYfW5U/ka4bf1noreSHJ2ZKk+0OHjrcvgbjP/Fnod29A3ac+7Wgcxn/0LmMf+hcxj90LuMfOle98f9JG/oB7L4N3v97d6sfwO4z/4fOZfxD5zL+oSM1vDc+v61b/iXalPi+e3u/1bD5ROTvkpDvmUQx6hZ1bfrHLLaY6Klb1O5XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4LwAA//+KpOMG") sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffd, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m56.502452754s ago: executing program 9 (id=2295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffc, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) io_uring_setup(0x1a7a, &(0x7f0000000340)={0x0, 0xf04d, 0x1, 0x2, 0x1a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00') sendfile(r4, r4, 0x0, 0x1) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r5, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r7, &(0x7f00000000c0)=' ', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_clone(0x410c5000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20142, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r8], 0x108}}], 0x2, 0xc040) 4m49.490235659s ago: executing program 9 (id=2300): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, 0x0, 0x0, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 4m38.48151085s ago: executing program 9 (id=2310): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r1, r0, 0x0, 0x3ffff) 4m36.611380241s ago: executing program 9 (id=2313): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m35.767685679s ago: executing program 9 (id=2315): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2b4602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000a940)='freezer.parent_freezing\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 4m34.854393939s ago: executing program 9 (id=2317): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) 4m19.61180177s ago: executing program 48 (id=2317): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) 50.87234766s ago: executing program 5 (id=2529): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 47.786905009s ago: executing program 5 (id=2530): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137", 0x21}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000"], 0xf8}}, 0x40000) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0xa, 0x4e23, 0xfff, @empty, 0x31ba}, 0x1c, 0x0}, 0x20040040) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 47.43429226s ago: executing program 5 (id=2531): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000240)=r3, 0x8) 47.062057269s ago: executing program 5 (id=2532): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080), 0x1, 0x7b9, &(0x7f00000007c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffff7, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x3]}) unlink(&(0x7f0000000080)='./file1\x00') 46.120131226s ago: executing program 5 (id=2533): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50) 44.574469991s ago: executing program 5 (id=2534): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, 0x0) 42.93409714s ago: executing program 49 (id=2534): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, 0x0) 16.454269828s ago: executing program 6 (id=2560): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d2a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'full', 0x20, 0x8, 0x20, 0x46}, 0xd) 16.238205976s ago: executing program 6 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c0001"], 0x20}}, 0x80) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x402c0d5}, 0x0) 15.744060818s ago: executing program 6 (id=2562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 14.8099765s ago: executing program 6 (id=2563): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}]}}) 9.289232291s ago: executing program 6 (id=2564): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f0000000880)=""/108, 0x6c}], 0x7}, 0x10100) 9.115381968s ago: executing program 6 (id=2565): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xdcc4, 0x0, 0x0, 0x1e4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) 4.494032975s ago: executing program 0 (id=2279): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=cp1255,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,check=relaxed,shortname=winnt\x00\x00hortname=lower,shortname=win95,shortname=win95,nonumtail=0,shortname=mixed,uni_xlate=1,allow_utime=00000000000000000000777,\x00'], 0xff, 0x371, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 4.077948671s ago: executing program 0 (id=2566): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137", 0x21}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0xa, 0x4e23, 0xfff, @empty, 0x31ba}, 0x1c, 0x0}, 0x20040040) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 3.931481394s ago: executing program 0 (id=2567): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d2a) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000180)={'full', 0x20, 0x8, 0x20, 0x46}, 0xd) 3.623838497s ago: executing program 0 (id=2568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x402c0d5}, 0x0) 3.327910257s ago: executing program 0 (id=2569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 3.067641015s ago: executing program 0 (id=2570): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}]}}) 2.084988848s ago: executing program 2 (id=2293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f85"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.573251422s ago: executing program 2 (id=2571): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f0000000880)=""/108, 0x6c}], 0x7}, 0x10100) 363.553717ms ago: executing program 2 (id=2572): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 0s ago: executing program 2 (id=2573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606908068c3c270040e700009e0ff008001f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tached to iowarrior0 [ 1851.839478][T13371] usb 7-1: string descriptor 0 read error: -22 [ 1851.846221][T13371] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1851.902309][T13371] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.949757][T14350] usb 6-1: USB disconnect, device number 14 [ 1852.152160][T13371] usb 7-1: Can't get UAC3 power state for id 10 [ 1852.648005][ T5782] Bluetooth: hci2: command tx timeout [ 1852.808428][T13371] usb 7-1: 2:0: failed to get current value for ch 0 (-32) [ 1852.939665][ T5928] team0 (unregistering): Port device team_slave_1 removed [ 1853.038943][ T5928] team0 (unregistering): Port device team_slave_0 removed [ 1853.240116][T13371] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1853.822325][T13371] usb 7-1: USB disconnect, device number 30 [ 1854.410854][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.723946][ T5782] Bluetooth: hci2: command tx timeout [ 1854.752312][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.111407][T16465] team0: Port device team_slave_0 added [ 1855.330103][T16465] team0: Port device team_slave_1 added [ 1856.947575][T16593] lo speed is unknown, defaulting to 1000 [ 1857.075982][T16465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1857.177549][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1857.348475][T16465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1857.445246][T16465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1857.537299][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1857.672097][T16465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.195946][T16465] hsr_slave_0: entered promiscuous mode [ 1859.235624][T16465] hsr_slave_1: entered promiscuous mode [ 1859.321476][T16465] debugfs: 'hsr0' already exists in 'hsr' [ 1859.364793][T16465] Cannot create hsr debugfs directory [ 1859.425601][T16528] chnl_net:caif_netlink_parms(): no params data found [ 1860.713220][T16612] loop5: detected capacity change from 0 to 128 [ 1860.812828][T16612] EXT4-fs: Ignoring removed nobh option [ 1861.061464][T16612] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1861.178710][T16612] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1861.399310][T13371] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1861.408280][T16612] input: syz0 as /devices/virtual/input/input25 [ 1861.619214][T13371] usb 7-1: Using ep0 maxpacket: 8 [ 1861.653373][T13371] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1861.670313][T13371] usb 7-1: config 0 has no interface number 0 [ 1861.715464][T13371] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1861.755746][T13371] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024 [ 1861.790602][T13371] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1861.842694][T13371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.880416][T13371] usb 7-1: config 0 descriptor?? [ 1861.891228][T16615] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1861.945403][T15354] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1861.967134][T13371] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1862.265145][T13371] usb 7-1: USB disconnect, device number 31 [ 1862.440768][T16628] loop9: detected capacity change from 0 to 256 [ 1862.742799][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.749842][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.457845][T16528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.017397][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.025290][T16528] bridge_slave_0: entered allmulticast mode [ 1864.049677][T16528] bridge_slave_0: entered promiscuous mode [ 1865.518862][T16528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.550629][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.597305][T16528] bridge_slave_1: entered allmulticast mode [ 1865.618881][T16528] bridge_slave_1: entered promiscuous mode [ 1865.719635][T16644] vcan0: entered allmulticast mode [ 1868.541492][T16528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.221207][T16659] loop5: detected capacity change from 0 to 40427 [ 1869.241515][T16528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.332308][T16659] F2FS-fs (loop5): invalid crc value [ 1869.348626][T16662] loop6: detected capacity change from 0 to 16 [ 1869.395872][T16662] erofs (device loop6): mounted with root inode @ nid 36. [ 1869.629571][T16659] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1869.639857][T16659] F2FS-fs (loop5): Start checkpoint disabled! [ 1869.673455][T16659] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1869.692533][T16659] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1869.756662][ T29] audit: type=1804 audit(1772873335.560:305): pid=16659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2321" name="/newroot/60/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 1869.822532][T16659] syz.5.2321: attempt to access beyond end of device [ 1869.822532][T16659] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1869.837385][T16659] syz.5.2321: attempt to access beyond end of device [ 1869.837385][T16659] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1870.006873][ T6364] kworker/u8:12: attempt to access beyond end of device [ 1870.006873][ T6364] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1870.090638][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1870.090774][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1870.090864][ T6364] Workqueue: writeback wb_workfn (flush-7:5) [ 1870.091017][ T6364] Call Trace: [ 1870.091059][ T6364] [ 1870.091104][ T6364] __dump_stack+0x26/0x30 [ 1870.091254][ T6364] dump_stack_lvl+0x14c/0x1c0 [ 1870.091408][ T6364] dump_stack+0x1e/0x25 [ 1870.091545][ T6364] f2fs_handle_critical_error+0xa6f/0xc20 [ 1870.091748][ T6364] f2fs_stop_checkpoint+0x65/0x80 [ 1870.091915][ T6364] f2fs_write_end_io+0x12e6/0x2560 [ 1870.092145][ T6364] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1870.092322][ T6364] bio_endio+0x1006/0x1160 [ 1870.092511][ T6364] submit_bio_noacct+0x533/0x2960 [ 1870.092690][ T6364] submit_bio+0x57a/0x620 [ 1870.092824][ T6364] f2fs_submit_write_bio+0x115/0x350 [ 1870.092993][ T6364] __submit_merged_bio+0x16f/0x780 [ 1870.093156][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.093376][ T6364] __submit_merged_write_cond+0x4ba/0xae0 [ 1870.093567][ T6364] f2fs_write_data_pages+0x5073/0x5e10 [ 1870.093867][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.094058][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.094243][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.094434][ T6364] ? __update_load_avg_cfs_rq+0xe9/0x1060 [ 1870.094599][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.094794][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.094978][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.095158][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.095344][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.095525][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.095705][ T6364] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1870.095880][ T6364] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1870.096053][ T6364] do_writepages+0x3f2/0x860 [ 1870.096189][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.096409][ T6364] ? queue_io+0x7d1/0x800 [ 1870.096561][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.096760][ T6364] __writeback_single_inode+0xfc/0x1440 [ 1870.096935][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.097153][ T6364] writeback_sb_inodes+0xb3b/0x1d90 [ 1870.097436][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.097614][ T6364] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1870.097808][ T6364] wb_writeback+0x4f1/0xcd0 [ 1870.097995][ T6364] ? queue_io+0x4d1/0x800 [ 1870.098159][ T6364] wb_workfn+0x3b9/0x19b0 [ 1870.098307][ T6364] ? kmsan_get_metadata+0xf1/0x160 [ 1870.098510][ T6364] ? __pfx_wb_workfn+0x10/0x10 [ 1870.098649][ T6364] process_scheduled_works+0xb21/0x1e30 [ 1870.098860][ T6364] worker_thread+0xede/0x1580 [ 1870.099039][ T6364] kthread+0x53f/0x600 [ 1870.099200][ T6364] ? __pfx_worker_thread+0x10/0x10 [ 1870.099364][ T6364] ? __pfx_kthread+0x10/0x10 [ 1870.099522][ T6364] ret_from_fork+0x20f/0x910 [ 1870.099662][ T6364] ? __switch_to+0x51c/0x750 [ 1870.099833][ T6364] ? __pfx_kthread+0x10/0x10 [ 1870.099994][ T6364] ret_from_fork_asm+0x1a/0x30 [ 1870.100188][ T6364] [ 1870.138494][T16528] team0: Port device team_slave_0 added [ 1870.301649][ T6364] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1870.851634][T16528] team0: Port device team_slave_1 added [ 1871.411861][T16528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.448670][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.578515][T16528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.716861][T16528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.752571][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.883013][T16528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1874.101567][T16465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1874.580492][T16465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1874.717000][T16465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1874.940047][T16528] hsr_slave_0: entered promiscuous mode [ 1874.997140][T16528] hsr_slave_1: entered promiscuous mode [ 1875.037733][T16528] debugfs: 'hsr0' already exists in 'hsr' [ 1875.043630][T16528] Cannot create hsr debugfs directory [ 1875.586570][T16465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1879.698017][T16700] loop5: detected capacity change from 0 to 40427 [ 1879.857795][T16700] F2FS-fs (loop5): invalid crc value [ 1880.084792][T16700] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1880.096419][T16700] F2FS-fs (loop5): Start checkpoint disabled! [ 1880.195357][T16700] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1880.202862][T16700] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1880.291552][T16700] syz.5.2331: attempt to access beyond end of device [ 1880.291552][T16700] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1880.306185][T16700] syz.5.2331: attempt to access beyond end of device [ 1880.306185][T16700] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1880.375420][ T29] audit: type=1804 audit(1772873346.071:306): pid=16700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2331" name="/newroot/62/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 1880.447222][T10944] kworker/u8:11: attempt to access beyond end of device [ 1880.447222][T10944] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1880.552496][T10944] CPU: 0 UID: 0 PID: 10944 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1880.552629][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1880.552735][T10944] Workqueue: writeback wb_workfn (flush-7:5) [ 1880.552910][T10944] Call Trace: [ 1880.552959][T10944] [ 1880.553009][T10944] __dump_stack+0x26/0x30 [ 1880.553155][T10944] dump_stack_lvl+0x14c/0x1c0 [ 1880.553308][T10944] dump_stack+0x1e/0x25 [ 1880.553448][T10944] f2fs_handle_critical_error+0xa6f/0xc20 [ 1880.553645][T10944] f2fs_stop_checkpoint+0x65/0x80 [ 1880.553828][T10944] f2fs_write_end_io+0x12e6/0x2560 [ 1880.554060][T10944] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1880.554231][T10944] bio_endio+0x1006/0x1160 [ 1880.554417][T10944] submit_bio_noacct+0x533/0x2960 [ 1880.554595][T10944] submit_bio+0x57a/0x620 [ 1880.554733][T10944] f2fs_submit_write_bio+0x115/0x350 [ 1880.554901][T10944] __submit_merged_bio+0x16f/0x780 [ 1880.555060][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.555254][T10944] __submit_merged_write_cond+0x4ba/0xae0 [ 1880.555437][T10944] f2fs_write_data_pages+0x5073/0x5e10 [ 1880.555736][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.555914][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.556091][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.556265][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.556442][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.556622][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.556798][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.556979][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.557156][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.557334][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.557517][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.557697][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.557877][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.558058][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.558239][T10944] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1880.558411][T10944] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1880.558581][T10944] do_writepages+0x3f2/0x860 [ 1880.558716][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.558906][T10944] ? queue_io+0x7d1/0x800 [ 1880.559043][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.559172][T10944] __writeback_single_inode+0xfc/0x1440 [ 1880.559288][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.559410][T10944] writeback_sb_inodes+0xb3b/0x1d90 [ 1880.559586][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.559705][T10944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1880.559827][T10944] wb_writeback+0x4f1/0xcd0 [ 1880.559947][T10944] ? queue_io+0x4d1/0x800 [ 1880.560052][T10944] wb_workfn+0x3b9/0x19b0 [ 1880.560143][T10944] ? kmsan_get_metadata+0xf1/0x160 [ 1880.560269][T10944] ? __pfx_wb_workfn+0x10/0x10 [ 1880.560360][T10944] process_scheduled_works+0xb21/0x1e30 [ 1880.560491][T10944] worker_thread+0xede/0x1580 [ 1880.560605][T10944] kthread+0x53f/0x600 [ 1880.560711][T10944] ? __pfx_worker_thread+0x10/0x10 [ 1880.560812][T10944] ? __pfx_kthread+0x10/0x10 [ 1880.560910][T10944] ret_from_fork+0x20f/0x910 [ 1880.561001][T10944] ? __switch_to+0x51c/0x750 [ 1880.561108][T10944] ? __pfx_kthread+0x10/0x10 [ 1880.561211][T10944] ret_from_fork_asm+0x1a/0x30 [ 1880.561337][T10944] [ 1881.325587][T10944] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1881.335190][T13065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1881.361404][T13065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1881.384873][T13065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1881.417428][T13065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1881.442325][T13065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1881.716498][T16465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.167728][T16705] lo speed is unknown, defaulting to 1000 [ 1882.190822][T16465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1882.463609][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.471036][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.699983][T16528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1882.774784][T16528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1882.921316][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.928834][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.044476][T16528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1883.136543][T16528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1883.522601][T13065] Bluetooth: hci3: command tx timeout [ 1883.977632][T11819] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.174503][T11819] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.386734][T11819] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.511313][T11819] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.595203][T13065] Bluetooth: hci3: command tx timeout [ 1886.560762][T16705] chnl_net:caif_netlink_parms(): no params data found [ 1887.677435][T13065] Bluetooth: hci3: command tx timeout [ 1888.048353][T11819] bridge_slave_1: left allmulticast mode [ 1888.075470][T11819] bridge_slave_1: left promiscuous mode [ 1888.081998][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.188161][T11819] bridge_slave_0: left allmulticast mode [ 1888.193998][T11819] bridge_slave_0: left promiscuous mode [ 1888.214771][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.327488][T16733] kvm: pic: non byte write [ 1889.099843][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.136362][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.213775][T11819] bond0 (unregistering): Released all slaves [ 1889.260554][T16528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1889.784971][T13065] Bluetooth: hci3: command tx timeout [ 1889.913510][T16528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1890.486944][T16741] loop5: detected capacity change from 0 to 40427 [ 1890.493782][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.560185][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.585319][T16705] bridge_slave_0: entered allmulticast mode [ 1890.596623][T16741] F2FS-fs (loop5): invalid crc value [ 1890.641151][T16705] bridge_slave_0: entered promiscuous mode [ 1890.708884][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.716468][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1890.868195][T16741] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1890.889503][T16741] F2FS-fs (loop5): Start checkpoint disabled! [ 1890.903264][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.916376][T16741] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1890.923759][T16741] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1890.966398][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.995763][ T29] audit: type=1804 audit(1772873356.811:307): pid=16741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2340" name="/newroot/68/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 1891.018013][T16705] bridge_slave_1: entered allmulticast mode [ 1891.030517][T16705] bridge_slave_1: entered promiscuous mode [ 1891.059684][T16741] syz.5.2340: attempt to access beyond end of device [ 1891.059684][T16741] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1891.074734][T16741] syz.5.2340: attempt to access beyond end of device [ 1891.074734][T16741] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1891.173295][ T34] kworker/u8:2: attempt to access beyond end of device [ 1891.173295][ T34] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1891.260784][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1891.260922][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1891.261030][ T34] Workqueue: writeback wb_workfn (flush-7:5) [ 1891.261210][ T34] Call Trace: [ 1891.261259][ T34] [ 1891.261308][ T34] __dump_stack+0x26/0x30 [ 1891.261459][ T34] dump_stack_lvl+0x14c/0x1c0 [ 1891.261621][ T34] dump_stack+0x1e/0x25 [ 1891.261762][ T34] f2fs_handle_critical_error+0xa6f/0xc20 [ 1891.261963][ T34] f2fs_stop_checkpoint+0x65/0x80 [ 1891.262140][ T34] f2fs_write_end_io+0x12e6/0x2560 [ 1891.262371][ T34] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1891.262550][ T34] bio_endio+0x1006/0x1160 [ 1891.262743][ T34] submit_bio_noacct+0x533/0x2960 [ 1891.262926][ T34] submit_bio+0x57a/0x620 [ 1891.263062][ T34] f2fs_submit_write_bio+0x115/0x350 [ 1891.263236][ T34] __submit_merged_bio+0x16f/0x780 [ 1891.263402][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.263604][ T34] __submit_merged_write_cond+0x4ba/0xae0 [ 1891.263799][ T34] f2fs_write_data_pages+0x5073/0x5e10 [ 1891.264102][ T34] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 1891.264291][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.264467][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.264656][ T34] ? update_load_avg+0x14eb/0x25d0 [ 1891.264819][ T34] ? update_load_avg+0x14c0/0x25d0 [ 1891.264992][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.265161][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.265341][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.265514][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.265699][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.265868][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.266043][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1891.266212][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1891.266377][ T34] do_writepages+0x3f2/0x860 [ 1891.266510][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.266701][ T34] ? queue_io+0x7d1/0x800 [ 1891.266848][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.267035][ T34] __writeback_single_inode+0xfc/0x1440 [ 1891.267207][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.267400][ T34] writeback_sb_inodes+0xb3b/0x1d90 [ 1891.267674][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.267844][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.268030][ T34] wb_writeback+0x4f1/0xcd0 [ 1891.268216][ T34] ? queue_io+0x4d1/0x800 [ 1891.268375][ T34] wb_workfn+0x3b9/0x19b0 [ 1891.268514][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1891.268715][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 1891.268848][ T34] process_scheduled_works+0xb21/0x1e30 [ 1891.269053][ T34] worker_thread+0xede/0x1580 [ 1891.269225][ T34] kthread+0x53f/0x600 [ 1891.269380][ T34] ? __pfx_worker_thread+0x10/0x10 [ 1891.269534][ T34] ? __pfx_kthread+0x10/0x10 [ 1891.269692][ T34] ret_from_fork+0x20f/0x910 [ 1891.269835][ T34] ? __switch_to+0x51c/0x750 [ 1891.269995][ T34] ? __pfx_kthread+0x10/0x10 [ 1891.270150][ T34] ret_from_fork_asm+0x1a/0x30 [ 1891.270335][ T34] [ 1891.312486][T16465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.409024][ T34] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1891.855272][T11819] hsr_slave_0: left promiscuous mode [ 1891.884743][T11819] hsr_slave_1: left promiscuous mode [ 1891.921002][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1891.954705][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1891.977950][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1892.024616][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1892.098724][T11819] veth1_macvtap: left promiscuous mode [ 1892.124618][T11819] veth0_macvtap: left promiscuous mode [ 1892.130466][T11819] veth1_vlan: left promiscuous mode [ 1892.172641][T11819] veth0_vlan: left promiscuous mode [ 1892.303711][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1892.345044][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1892.359771][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1892.384165][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1892.395022][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1893.636694][T11819] team0 (unregistering): Port device team_slave_1 removed [ 1893.720620][T11819] team0 (unregistering): Port device team_slave_0 removed [ 1894.524730][T13065] Bluetooth: hci5: command tx timeout [ 1894.630606][T16705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1894.734370][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.741908][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1895.138358][T16757] cgroup: Unknown subsys name 'cpuset' [ 1895.176460][T16757] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1896.035536][T16705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.554660][T13065] Bluetooth: hci5: command tx timeout [ 1897.106068][T16757] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1897.445584][T16705] team0: Port device team_slave_0 added [ 1897.470013][T16745] lo speed is unknown, defaulting to 1000 [ 1897.683470][T16705] team0: Port device team_slave_1 added [ 1897.971351][T16705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1897.988647][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.060835][T16705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1898.266868][T16705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1898.290702][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.375721][T16705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1898.634569][T13065] Bluetooth: hci5: command tx timeout [ 1899.202357][T16705] hsr_slave_0: entered promiscuous mode [ 1899.212844][T16705] hsr_slave_1: entered promiscuous mode [ 1899.241363][T16705] debugfs: 'hsr0' already exists in 'hsr' [ 1899.251883][T16705] Cannot create hsr debugfs directory [ 1899.614229][T14350] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1899.797035][T14350] usb 7-1: Using ep0 maxpacket: 16 [ 1899.829308][T14350] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.840145][T14350] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1899.871638][T14350] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1899.895798][T14350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.911712][T14350] usb 7-1: Product: syz [ 1899.929507][T14350] usb 7-1: Manufacturer: syz [ 1899.957533][T14350] usb 7-1: SerialNumber: syz [ 1900.434788][T14350] usb 7-1: 0:2 : does not exist [ 1900.662244][T11819] bridge_slave_1: left allmulticast mode [ 1900.677200][T11819] bridge_slave_1: left promiscuous mode [ 1900.683711][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.714476][T13065] Bluetooth: hci5: command tx timeout [ 1900.744565][T11819] bridge_slave_0: left allmulticast mode [ 1900.750415][T11819] bridge_slave_0: left promiscuous mode [ 1900.778698][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.795783][T14350] usb 7-1: USB disconnect, device number 32 [ 1900.962682][T15745] udevd[15745]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1901.358158][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1901.410434][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1901.467616][T11819] bond0 (unregistering): Released all slaves [ 1901.878335][T16745] chnl_net:caif_netlink_parms(): no params data found [ 1902.018927][T11819] hsr_slave_0: left promiscuous mode [ 1902.048471][T11819] hsr_slave_1: left promiscuous mode [ 1902.098563][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1902.116209][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1902.695320][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1902.714998][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1902.735302][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1902.749737][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1902.772043][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1903.516271][T11819] team0 (unregistering): Port device team_slave_1 removed [ 1903.628074][T11819] team0 (unregistering): Port device team_slave_0 removed [ 1904.346757][T16800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2355'. [ 1904.848364][ T5782] Bluetooth: hci0: command tx timeout [ 1906.171295][T16805] netlink: 'syz.5.2357': attribute type 1 has an invalid length. [ 1907.116892][ T5782] Bluetooth: hci0: command tx timeout [ 1908.688529][T16789] lo speed is unknown, defaulting to 1000 [ 1909.290317][ T5782] Bluetooth: hci0: command tx timeout [ 1910.546298][T16820] loop5: detected capacity change from 0 to 2048 [ 1911.383754][ T5782] Bluetooth: hci0: command tx timeout [ 1911.751704][T16745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.763559][T16745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.778349][T16745] bridge_slave_0: entered allmulticast mode [ 1911.788206][T16745] bridge_slave_0: entered promiscuous mode [ 1912.672642][T16745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.703942][T16745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.744331][T16745] bridge_slave_1: entered allmulticast mode [ 1912.776542][T16745] bridge_slave_1: entered promiscuous mode [ 1912.846887][T16830] lo speed is unknown, defaulting to 1000 [ 1913.646436][T16745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.667476][T16745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1913.680606][T16705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1913.708560][T16705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1913.961823][T16705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1914.104751][T16745] team0: Port device team_slave_0 added [ 1914.159727][T16745] team0: Port device team_slave_1 added [ 1914.421253][T16745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1914.449594][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1914.507244][T16745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1914.571859][T16705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1914.729306][T16846] usb usb1: usbfs: process 16846 (syz.5.2369) did not claim interface 0 before use [ 1916.404398][T16789] chnl_net:caif_netlink_parms(): no params data found [ 1916.566703][T16745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1916.603588][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1916.664290][T16745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1917.221365][T11819] bridge_slave_1: left allmulticast mode [ 1917.239364][T11819] bridge_slave_1: left promiscuous mode [ 1917.259238][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.286084][T16850] loop5: detected capacity change from 0 to 40427 [ 1917.314000][T11819] bridge_slave_0: left allmulticast mode [ 1917.330482][T11819] bridge_slave_0: left promiscuous mode [ 1917.342245][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.396639][T16850] F2FS-fs (loop5): invalid crc value [ 1918.205696][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1918.242441][T16850] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1918.271135][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1918.271480][T16850] F2FS-fs (loop5): Start checkpoint disabled! [ 1918.291583][T11819] bond0 (unregistering): Released all slaves [ 1918.296399][T16850] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1918.306481][T16850] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1918.519079][T16745] hsr_slave_0: entered promiscuous mode [ 1918.558472][T16745] hsr_slave_1: entered promiscuous mode [ 1918.567400][T16745] debugfs: 'hsr0' already exists in 'hsr' [ 1918.573451][T16745] Cannot create hsr debugfs directory [ 1918.822620][T11819] hsr_slave_0: left promiscuous mode [ 1918.830850][T11819] hsr_slave_1: left promiscuous mode [ 1918.877009][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1918.905182][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1920.009241][T11819] team0 (unregistering): Port device team_slave_1 removed [ 1920.649627][T11819] team0 (unregistering): Port device team_slave_0 removed [ 1921.731401][ T5934] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1921.913251][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 1921.929905][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.941419][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.953509][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1922.025665][T16869] lo speed is unknown, defaulting to 1000 [ 1922.578677][ T5934] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1922.588166][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.640904][ T5934] usb 6-1: config 0 descriptor?? [ 1922.907234][T16789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.915813][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.924998][T16789] bridge_slave_0: entered allmulticast mode [ 1922.943669][T16789] bridge_slave_0: entered promiscuous mode [ 1922.984835][T16789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.992295][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1923.023546][T16789] bridge_slave_1: entered allmulticast mode [ 1923.047410][T16789] bridge_slave_1: entered promiscuous mode [ 1923.322769][ T5934] usbhid 6-1:0.0: can't add hid device: -71 [ 1923.329269][ T5934] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1923.413990][ T5934] usb 6-1: USB disconnect, device number 15 [ 1923.710461][T16789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1923.809575][T16789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.942156][T16876] binder: 16875:16876 ioctl c0306201 200000000080 returned -22 [ 1924.134883][T16789] team0: Port device team_slave_0 added [ 1924.175431][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.182015][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1924.228646][T16789] team0: Port device team_slave_1 added [ 1925.652187][T16882] loop5: detected capacity change from 0 to 40427 [ 1925.751783][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1925.887640][T16789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.912305][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.950181][T16882] F2FS-fs (loop5): invalid crc value [ 1925.991646][T16789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1926.067294][T16789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1926.112303][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1926.223656][T16789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1926.641281][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1927.063749][T11819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.071193][T11819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1927.104968][T16882] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1927.136445][T16882] F2FS-fs (loop5): Start checkpoint disabled! [ 1927.150503][T16789] hsr_slave_0: entered promiscuous mode [ 1927.165993][T16789] hsr_slave_1: entered promiscuous mode [ 1927.172918][T16882] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1927.180294][T16882] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1927.190710][T16789] debugfs: 'hsr0' already exists in 'hsr' [ 1927.199481][T16789] Cannot create hsr debugfs directory [ 1927.254649][T16745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1927.276193][ T29] audit: type=1804 audit(1772873393.093:308): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2381" name="/newroot/84/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 1927.458823][T16745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1927.478556][ T34] kworker/u8:2: attempt to access beyond end of device [ 1927.478556][ T34] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1927.511888][T16745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1927.519582][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1927.519712][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1927.519811][ T34] Workqueue: writeback wb_workfn (flush-7:5) [ 1927.519994][ T34] Call Trace: [ 1927.520045][ T34] [ 1927.520095][ T34] __dump_stack+0x26/0x30 [ 1927.520244][ T34] dump_stack_lvl+0x14c/0x1c0 [ 1927.520409][ T34] dump_stack+0x1e/0x25 [ 1927.520549][ T34] f2fs_handle_critical_error+0xa6f/0xc20 [ 1927.520748][ T34] f2fs_stop_checkpoint+0x65/0x80 [ 1927.520922][ T34] f2fs_write_end_io+0x12e6/0x2560 [ 1927.521152][ T34] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1927.521334][ T34] bio_endio+0x1006/0x1160 [ 1927.521521][ T34] submit_bio_noacct+0x533/0x2960 [ 1927.521699][ T34] submit_bio+0x57a/0x620 [ 1927.521833][ T34] f2fs_submit_write_bio+0x115/0x350 [ 1927.522000][ T34] __submit_merged_bio+0x16f/0x780 [ 1927.522158][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.522357][ T34] __submit_merged_write_cond+0x4ba/0xae0 [ 1927.522540][ T34] f2fs_write_data_pages+0x5073/0x5e10 [ 1927.522844][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.523021][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.523201][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.523383][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.523557][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.523737][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.523913][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.524094][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.524282][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.524467][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.524651][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.524832][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.525022][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.525200][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.525385][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1927.525547][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1927.525711][ T34] do_writepages+0x3f2/0x860 [ 1927.525838][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.526021][ T34] ? queue_io+0x7d1/0x800 [ 1927.526168][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.526365][ T34] __writeback_single_inode+0xfc/0x1440 [ 1927.526536][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.526723][ T34] writeback_sb_inodes+0xb3b/0x1d90 [ 1927.526994][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.527169][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1927.527387][ T34] wb_writeback+0x4f1/0xcd0 [ 1927.527574][ T34] ? queue_io+0x4d1/0x800 [ 1927.527740][ T34] wb_workfn+0x3b9/0x19b0 [ 1927.527887][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 1927.528087][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 1927.528228][ T34] process_scheduled_works+0xb21/0x1e30 [ 1927.528444][ T34] worker_thread+0xede/0x1580 [ 1927.528625][ T34] kthread+0x53f/0x600 [ 1927.528785][ T34] ? __pfx_worker_thread+0x10/0x10 [ 1927.528945][ T34] ? __pfx_kthread+0x10/0x10 [ 1927.529105][ T34] ret_from_fork+0x20f/0x910 [ 1927.529243][ T34] ? __switch_to+0x51c/0x750 [ 1927.529417][ T34] ? __pfx_kthread+0x10/0x10 [ 1927.529582][ T34] ret_from_fork_asm+0x1a/0x30 [ 1927.529777][ T34] [ 1927.854240][ T34] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1928.012305][T16745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1928.197904][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.205457][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1928.912645][ T5849] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1929.076999][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 1929.093759][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.126831][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.160540][ T5849] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1929.220347][ T5849] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1929.243271][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.286091][ T5849] usb 7-1: config 0 descriptor?? [ 1929.971922][ T5849] usbhid 7-1:0.0: can't add hid device: -71 [ 1929.981382][ T5849] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1930.007659][ T5849] usb 7-1: USB disconnect, device number 33 [ 1930.059194][T16901] loop5: detected capacity change from 0 to 512 [ 1930.207161][T16901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1930.286378][T16789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1930.306479][T16901] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1930.361040][T16789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1930.423905][T16789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1930.477473][T16789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1930.578657][T16745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1930.596185][T15354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1930.856714][T16745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1931.289758][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.297332][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1931.380946][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.388549][ T5928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1931.519392][T16705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1931.820177][T16916] loop5: detected capacity change from 0 to 512 [ 1931.984891][T16916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1932.461551][T15354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1933.147325][T16705] veth0_vlan: entered promiscuous mode [ 1933.424303][T16789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.574447][T16705] veth1_vlan: entered promiscuous mode [ 1933.894013][T16929] loop5: detected capacity change from 0 to 256 [ 1933.913399][T16929] exfat: Deprecated parameter 'utf8' [ 1934.567527][T16929] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1935.302879][ T29] audit: type=1804 audit(1772873401.064:309): pid=16928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2391" name="/newroot/89/file0/file1" dev="loop5" ino=1048847 res=1 errno=0 [ 1935.480708][ T29] audit: type=1804 audit(1772873401.074:310): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2391" name="/newroot/89/file0/file1" dev="loop5" ino=1048847 res=1 errno=0 [ 1936.351026][T16789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1936.476782][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.484316][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1936.544796][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.552315][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.280457][T16705] veth0_macvtap: entered promiscuous mode [ 1937.400298][T16705] veth1_macvtap: entered promiscuous mode [ 1937.736739][T16945] loop5: detected capacity change from 0 to 4096 [ 1937.756915][T16945] EXT4-fs: inline encryption not supported [ 1937.811632][T16945] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1937.868333][T16945] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1937.914714][T16945] System zones: 0-5 [ 1937.952989][T16705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1937.992198][ T5849] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1938.004496][T16945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1938.108236][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1938.181479][T16745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1938.211974][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 1938.262638][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.316023][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.345220][ T8484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.357295][ T5849] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1938.357518][ T5849] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1938.357654][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.366766][ T5849] usb 7-1: config 0 descriptor?? [ 1938.442205][ T8484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.451210][ T8484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.565770][T15354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1938.600739][ T6364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.202531][ T5849] usbhid 7-1:0.0: can't add hid device: -71 [ 1939.271287][ T5849] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1939.357236][ T5849] usb 7-1: USB disconnect, device number 34 [ 1939.785018][T16745] veth0_vlan: entered promiscuous mode [ 1940.084595][T16745] veth1_vlan: entered promiscuous mode [ 1940.301591][T16789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1940.379596][T16970] loop6: detected capacity change from 0 to 512 [ 1940.447394][T16970] EXT4-fs: Ignoring removed bh option [ 1940.563140][T13065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1940.578779][T16970] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1940.586486][T13065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1940.602643][T13065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1940.618034][T13065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1940.627861][T16970] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #11: block 1: comm syz.6.2398: lblock 0 mapped to illegal pblock 1 (length 1) [ 1940.707171][T16970] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1940.707362][T13065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1940.712967][T16970] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1940.723967][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1940.724058][ C0] EXT4-fs (loop6): initial error at time 1772873406: ext4_map_blocks:776: inode 11: block 1 [ 1940.724255][ C0] EXT4-fs (loop6): last error at time 1772873406: ext4_map_blocks:776: inode 11: block 1 [ 1940.868871][T16970] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.2398: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1940.893770][T16970] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1940.902241][T16970] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.2398: ea_inode dec ref err=-117 [ 1941.038736][T16970] EXT4-fs (loop6): 1 orphan inode deleted [ 1941.099029][T16745] veth0_macvtap: entered promiscuous mode [ 1941.122858][T16970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1941.292672][T16971] lo speed is unknown, defaulting to 1000 [ 1941.298677][T16745] veth1_macvtap: entered promiscuous mode [ 1941.522449][T15282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1942.175907][T16980] loop6: detected capacity change from 0 to 2048 [ 1942.226130][T16745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1942.355846][T16982] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1942.439877][T16789] veth0_vlan: entered promiscuous mode [ 1942.647633][T16745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1942.747314][T16789] veth1_vlan: entered promiscuous mode [ 1942.872467][ T5782] Bluetooth: hci2: command tx timeout [ 1943.274041][ T6364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.386433][T10944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.396353][T10944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.545831][T16991] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2401'. [ 1943.594940][T10944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.639716][T10944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.754732][ T6364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.120860][ T6364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.157160][ T29] audit: type=1326 audit(1772873409.964:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.6.2403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feecad9c799 code=0x0 [ 1944.410885][ T6364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.960396][ T5782] Bluetooth: hci2: command tx timeout [ 1945.468834][T16789] veth0_macvtap: entered promiscuous mode [ 1945.532077][T16971] chnl_net:caif_netlink_parms(): no params data found [ 1945.787135][T16789] veth1_macvtap: entered promiscuous mode [ 1945.871747][T14345] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1946.101778][T14345] usb 7-1: Using ep0 maxpacket: 16 [ 1946.118259][T14345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1946.231035][T14345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1946.288975][T14345] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1946.368203][T14345] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1946.404744][T14345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.433916][T14345] usb 7-1: config 0 descriptor?? [ 1947.047521][ T5782] Bluetooth: hci2: command tx timeout [ 1947.178719][T14345] usbhid 7-1:0.0: can't add hid device: -71 [ 1947.247201][T14345] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1947.287609][T14345] usb 7-1: USB disconnect, device number 35 [ 1947.438241][T16789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1947.590394][T16789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1947.737872][ T8484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.771972][ T8484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1948.062504][ T8484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1948.140834][ T8484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1948.592220][ T6364] bridge_slave_1: left allmulticast mode [ 1948.598052][ T6364] bridge_slave_1: left promiscuous mode [ 1948.642154][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.772743][ T6364] bridge_slave_0: left allmulticast mode [ 1948.798312][ T6364] bridge_slave_0: left promiscuous mode [ 1948.810544][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.158286][ T5782] Bluetooth: hci2: command tx timeout [ 1951.019335][ T29] audit: type=1326 audit(1772873416.825:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.6.2412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feecad9c799 code=0x0 [ 1951.712331][ T6364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1951.758923][ T6364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1951.777330][ T6364] bond0 (unregistering): Released all slaves [ 1951.934266][T17046] lo speed is unknown, defaulting to 1000 [ 1952.546353][ T6364] hsr_slave_0: left promiscuous mode [ 1952.593925][ T6364] hsr_slave_1: left promiscuous mode [ 1952.672607][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1952.680170][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1952.821372][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1952.912704][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1952.927300][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1952.944460][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1952.963976][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1952.985102][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1953.028081][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1953.485365][ T6364] veth1_macvtap: left promiscuous mode [ 1953.502362][ T6364] veth0_macvtap: left promiscuous mode [ 1953.508209][ T6364] veth1_vlan: left promiscuous mode [ 1953.535226][ T6364] veth0_vlan: left promiscuous mode [ 1955.069510][ T5782] Bluetooth: hci3: command tx timeout [ 1955.460689][ T6364] team0 (unregistering): Port device team_slave_1 removed [ 1955.513932][ T6364] team0 (unregistering): Port device team_slave_0 removed [ 1955.735881][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.745242][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.756837][T16971] bridge_slave_0: entered allmulticast mode [ 1955.778440][T16971] bridge_slave_0: entered promiscuous mode [ 1956.047909][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.075191][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.100431][T16971] bridge_slave_1: entered allmulticast mode [ 1956.144726][T16971] bridge_slave_1: entered promiscuous mode [ 1956.576636][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1956.789039][T14345] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1956.845743][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1957.121436][ T5782] Bluetooth: hci3: command tx timeout [ 1957.214957][T17070] lo speed is unknown, defaulting to 1000 [ 1957.221576][T14345] usb 7-1: Using ep0 maxpacket: 16 [ 1957.289596][T14345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1957.325198][T14345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1957.347147][T10944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.391351][T14345] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1957.407949][T16971] team0: Port device team_slave_0 added [ 1957.447430][T14345] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1957.467429][T14345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.495515][T14345] usb 7-1: config 0 descriptor?? [ 1957.661083][T10944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.822653][T16971] team0: Port device team_slave_1 added [ 1957.907627][T17098] loop5: detected capacity change from 0 to 256 [ 1958.140460][T10944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.196767][T14345] usbhid 7-1:0.0: can't add hid device: -71 [ 1958.214924][T17098] FAT-fs (loop5): Directory bread(block 64) failed [ 1958.231245][T14345] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1958.235957][T17098] FAT-fs (loop5): Directory bread(block 65) failed [ 1958.281393][T14345] usb 7-1: USB disconnect, device number 36 [ 1958.298217][T17098] FAT-fs (loop5): Directory bread(block 66) failed [ 1958.322172][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1958.343804][T17098] FAT-fs (loop5): Directory bread(block 67) failed [ 1958.370798][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.382025][T17098] FAT-fs (loop5): Directory bread(block 68) failed [ 1958.429105][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1958.488969][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1958.497558][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.500871][T17098] FAT-fs (loop5): Directory bread(block 69) failed [ 1958.547234][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1958.595318][T17098] FAT-fs (loop5): Directory bread(block 70) failed [ 1958.608667][T17098] FAT-fs (loop5): Directory bread(block 71) failed [ 1958.625832][T17098] FAT-fs (loop5): Directory bread(block 72) failed [ 1958.650877][T10944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.655098][T17098] FAT-fs (loop5): Directory bread(block 73) failed [ 1959.191404][ T5782] Bluetooth: hci3: command tx timeout [ 1959.250676][T17109] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2418'. [ 1959.255713][T16971] hsr_slave_0: entered promiscuous mode [ 1959.315456][T16971] hsr_slave_1: entered promiscuous mode [ 1959.335233][T16971] debugfs: 'hsr0' already exists in 'hsr' [ 1959.357372][T16971] Cannot create hsr debugfs directory [ 1960.091817][ T29] audit: type=1326 audit(1772873425.905:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.6.2420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feecad9c799 code=0x0 [ 1960.230038][T10944] bridge_slave_1: left allmulticast mode [ 1960.250646][T10944] bridge_slave_1: left promiscuous mode [ 1960.282571][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.316669][T10944] bridge_slave_0: left allmulticast mode [ 1960.323148][T10944] bridge_slave_0: left promiscuous mode [ 1960.329617][T10944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.039062][T10944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1961.076833][T10944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1961.101130][T10944] bond0 (unregistering): Released all slaves [ 1961.273534][ T5782] Bluetooth: hci3: command tx timeout [ 1961.684273][T10944] hsr_slave_0: left promiscuous mode [ 1961.695624][T10944] hsr_slave_1: left promiscuous mode [ 1961.703815][T10944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1961.714588][T10944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1961.745778][T10944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1961.792048][T10944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1961.920964][T10944] veth1_macvtap: left promiscuous mode [ 1961.926666][T10944] veth0_macvtap: left promiscuous mode [ 1961.957492][T10944] veth1_vlan: left promiscuous mode [ 1961.972259][T10944] veth0_vlan: left promiscuous mode [ 1962.400793][ T8410] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1962.547021][T13065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1962.572554][ T8410] usb 7-1: Using ep0 maxpacket: 16 [ 1962.572821][T13065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1962.586936][T13065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1962.588933][ T8410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.609784][T13065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1962.623141][T13065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1962.624141][ T8410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.688946][ T8410] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1962.702891][ T8410] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1962.721410][ T8410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.792825][ T8410] usb 7-1: config 0 descriptor?? [ 1963.299133][T10944] team0 (unregistering): Port device team_slave_1 removed [ 1963.346410][T10944] team0 (unregistering): Port device team_slave_0 removed [ 1963.500120][ T8410] usbhid 7-1:0.0: can't add hid device: -71 [ 1963.517413][ T8410] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1963.557556][ T8410] usb 7-1: USB disconnect, device number 37 [ 1964.722283][ T5782] Bluetooth: hci5: command tx timeout [ 1966.798562][ T5782] Bluetooth: hci5: command tx timeout [ 1967.177442][T17070] chnl_net:caif_netlink_parms(): no params data found [ 1967.314453][ T29] audit: type=1326 audit(1772873433.126:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17161 comm="syz.5.2429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a7199c799 code=0x0 [ 1967.526386][T17146] lo speed is unknown, defaulting to 1000 [ 1968.873105][ T5782] Bluetooth: hci5: command tx timeout [ 1970.962039][ T5782] Bluetooth: hci5: command tx timeout [ 1971.110209][T17070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.131195][T17070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.139031][T17070] bridge_slave_0: entered allmulticast mode [ 1971.197520][T17070] bridge_slave_0: entered promiscuous mode [ 1971.419848][T17070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.480775][T17070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.488656][T17070] bridge_slave_1: entered allmulticast mode [ 1971.610582][T17070] bridge_slave_1: entered promiscuous mode [ 1972.550065][T14350] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1972.792143][T14350] usb 6-1: Using ep0 maxpacket: 16 [ 1972.842208][T14350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.875003][T14350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.910434][T14350] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1972.929634][T14350] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1972.949750][T16971] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1973.021762][T14350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.112531][T14350] usb 6-1: config 0 descriptor?? [ 1973.696161][T16971] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1973.886793][T14350] usbhid 6-1:0.0: can't add hid device: -71 [ 1973.949158][ T6455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.965708][T14350] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1974.016675][T14350] usb 6-1: USB disconnect, device number 16 [ 1974.164072][T17070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1974.184613][T17070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1974.194067][T16971] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1974.296050][T17146] chnl_net:caif_netlink_parms(): no params data found [ 1974.505979][ T6455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.576167][T16971] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1975.988782][ T6455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.091502][T17070] team0: Port device team_slave_0 added [ 1976.133542][ T6455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.243698][T17070] team0: Port device team_slave_1 added [ 1976.578077][T17070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1976.616068][T17070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1976.692328][T17070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1976.894429][T17070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1976.933720][T17070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1977.066400][T17070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1978.849090][T17070] hsr_slave_0: entered promiscuous mode [ 1978.875717][T17070] hsr_slave_1: entered promiscuous mode [ 1978.913091][T17070] debugfs: 'hsr0' already exists in 'hsr' [ 1978.918987][T17070] Cannot create hsr debugfs directory [ 1979.132171][ T6455] bridge_slave_1: left allmulticast mode [ 1979.138009][ T6455] bridge_slave_1: left promiscuous mode [ 1979.167682][T17228] loop5: detected capacity change from 0 to 1024 [ 1979.175294][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.209386][ T6455] bridge_slave_0: left allmulticast mode [ 1979.212260][T17228] EXT4-fs: inline encryption not supported [ 1979.230715][ T6455] bridge_slave_0: left promiscuous mode [ 1979.237166][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.336948][T17228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1979.988136][T15354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1980.101601][ T6455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1980.191269][ T6455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1980.247482][ T6455] bond0 (unregistering): Released all slaves [ 1981.834553][T17146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.842428][T17146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.850510][T17146] bridge_slave_0: entered allmulticast mode [ 1981.865990][T17146] bridge_slave_0: entered promiscuous mode [ 1983.880117][T17146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.923641][T17146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.933335][T17146] bridge_slave_1: entered allmulticast mode [ 1984.237800][T17256] loop5: detected capacity change from 0 to 2048 [ 1984.922893][T17146] bridge_slave_1: entered promiscuous mode [ 1984.941294][T17256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1985.692297][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.704017][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.872062][ T6455] hsr_slave_0: left promiscuous mode [ 1986.917247][ T6455] hsr_slave_1: left promiscuous mode [ 1987.896264][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1988.247481][ T8410] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1988.419830][ T8410] usb 6-1: Using ep0 maxpacket: 16 [ 1988.445003][ T8410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.486222][ T8410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.517777][ T8410] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1988.553749][ T8410] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1988.609264][ T8410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.650783][ T8410] usb 6-1: config 0 descriptor?? [ 1988.888321][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1988.913096][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1988.923833][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1989.066951][ T6455] veth1_macvtap: left promiscuous mode [ 1989.119314][ T6455] veth0_macvtap: left promiscuous mode [ 1989.139880][ T6455] veth1_vlan: left promiscuous mode [ 1989.145514][ T6455] veth0_vlan: left promiscuous mode [ 1989.358267][ T8410] usbhid 6-1:0.0: can't add hid device: -71 [ 1989.423943][ T8410] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1989.513644][ T8410] usb 6-1: USB disconnect, device number 17 [ 1993.535846][T17290] loop5: detected capacity change from 0 to 64 [ 1996.004248][ T6455] team0 (unregistering): Port device team_slave_1 removed [ 1996.114529][ T6455] team0 (unregistering): Port device team_slave_0 removed [ 1997.189281][T17312] syz_tun: entered allmulticast mode [ 1997.214101][T17312] syz_tun: left allmulticast mode [ 1997.286469][T17146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1997.397165][T17146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1997.789511][T17146] team0: Port device team_slave_0 added [ 1997.945776][T17146] team0: Port device team_slave_1 added [ 2000.186049][T17146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2000.202532][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2000.230320][T17146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2000.336816][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.353916][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.361190][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.403656][T17335] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2000.460421][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.470421][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.479170][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.487587][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.496345][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.505003][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.514028][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.522732][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.531506][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.540122][T17335] wlan0 speed is unknown, defaulting to 1000 [ 2000.557520][T17340] loop6: detected capacity change from 0 to 256 [ 2000.587871][T17340] exfat: Deprecated parameter 'utf8' [ 2000.625565][T17340] exfat: Deprecated parameter 'utf8' [ 2000.669698][T17340] exfat: Deprecated parameter 'utf8' [ 2000.766436][T17340] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d) [ 2001.164877][T17146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2001.201282][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2001.318502][T17146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2001.487250][T13065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2001.507518][T13065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2001.527936][T13065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2001.550776][T13065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2001.595613][T13065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2002.938663][T17146] hsr_slave_0: entered promiscuous mode [ 2002.989366][T17146] hsr_slave_1: entered promiscuous mode [ 2003.060589][T17146] debugfs: 'hsr0' already exists in 'hsr' [ 2003.098213][T17146] Cannot create hsr debugfs directory [ 2003.670384][ T5782] Bluetooth: hci0: command tx timeout [ 2004.498544][T17347] lo speed is unknown, defaulting to 1000 [ 2004.513465][T17347] wlan0 speed is unknown, defaulting to 1000 [ 2004.612715][T17366] loop5: detected capacity change from 0 to 512 [ 2004.676023][T17366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2004.748685][T17366] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2004.853711][T17366] EXT4-fs (loop5): 1 truncate cleaned up [ 2004.872447][T17366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2005.683325][T17373] loop6: detected capacity change from 0 to 256 [ 2005.978444][ T5782] Bluetooth: hci0: command tx timeout [ 2007.988891][ T5782] Bluetooth: hci0: command tx timeout [ 2008.485891][T15354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2009.058711][T17070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2009.570032][T17070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2010.072144][ T5782] Bluetooth: hci0: command tx timeout [ 2010.102127][T17070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2010.318260][T17385] fuse: Bad value for 'fd' [ 2010.328557][T17070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2010.968609][T17397] sctp: [Deprecated]: syz.5.2465 (pid 17397) Use of int in maxseg socket option. [ 2010.968609][T17397] Use struct sctp_assoc_value instead [ 2011.139340][T17393] loop6: detected capacity change from 0 to 2048 [ 2011.355549][T17393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2013.049752][T17347] chnl_net:caif_netlink_parms(): no params data found [ 2013.498992][T13065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2013.519937][T13065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2013.529525][T13065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2013.555191][T13065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2013.566243][T13065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2013.629696][T11819] bridge_slave_1: left allmulticast mode [ 2013.635532][T11819] bridge_slave_1: left promiscuous mode [ 2013.689395][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.742101][T11819] bridge_slave_0: left allmulticast mode [ 2013.765728][T11819] bridge_slave_0: left promiscuous mode [ 2013.797329][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.722435][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2014.818044][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2014.925609][T11819] bond0 (unregistering): Released all slaves [ 2015.828370][T13065] Bluetooth: hci2: command tx timeout [ 2017.117743][T11819] hsr_slave_0: left promiscuous mode [ 2017.153091][T11819] hsr_slave_1: left promiscuous mode [ 2017.180144][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2017.261880][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2017.907778][T13065] Bluetooth: hci2: command tx timeout [ 2019.854736][T11819] team0 (unregistering): Port device team_slave_1 removed [ 2019.977881][T11819] team0 (unregistering): Port device team_slave_0 removed [ 2019.993735][T13065] Bluetooth: hci2: command tx timeout [ 2020.552077][T17146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2020.739291][T17412] lo speed is unknown, defaulting to 1000 [ 2020.767820][T17412] wlan0 speed is unknown, defaulting to 1000 [ 2020.847518][T17146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2021.265428][T17146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2021.686253][T17146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2022.067565][T13065] Bluetooth: hci2: command tx timeout [ 2022.283501][T17347] bridge0: port 1(bridge_slave_0) entered blocking state [ 2022.296167][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.305643][T17347] bridge_slave_0: entered allmulticast mode [ 2022.326453][T17347] bridge_slave_0: entered promiscuous mode [ 2022.402038][T17347] bridge0: port 2(bridge_slave_1) entered blocking state [ 2022.418492][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.477438][T14247] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2022.566544][T17458] overlay: Unknown parameter '/' [ 2022.827950][T14247] usb 7-1: Using ep0 maxpacket: 16 [ 2022.878298][T14247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2022.947889][T14247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.977200][T14247] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2023.036129][T14247] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2023.084286][T14247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.126849][T14247] usb 7-1: config 0 descriptor?? [ 2023.408219][T17347] bridge_slave_1: entered allmulticast mode [ 2023.421843][T17347] bridge_slave_1: entered promiscuous mode [ 2023.903675][T14247] usbhid 7-1:0.0: can't add hid device: -71 [ 2023.970892][T14247] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2024.067498][T14247] usb 7-1: USB disconnect, device number 38 [ 2024.926041][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2024.948100][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2024.959546][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2024.984844][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2025.000577][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2025.448622][T17347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2025.860066][T17347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2027.107144][ T5782] Bluetooth: hci3: command tx timeout [ 2027.513944][ T5782] block nbd6: Receive control failed (result -107) [ 2027.627413][T17477] nbd6: detected capacity change from 0 to 18 [ 2027.655556][T17478] block nbd6: shutting down sockets [ 2027.740482][T17347] team0: Port device team_slave_0 added [ 2027.851363][T17347] team0: Port device team_slave_1 added [ 2028.214984][T17467] lo speed is unknown, defaulting to 1000 [ 2028.226505][T17412] chnl_net:caif_netlink_parms(): no params data found [ 2028.430296][ T1534] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2028.441145][ T1534] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2028.456545][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2028.492703][T17467] wlan0 speed is unknown, defaulting to 1000 [ 2028.522231][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2028.566431][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2028.614218][T17347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.632460][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2028.655488][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2028.682477][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2028.733741][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2028.759469][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2028.794429][T17347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.823176][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2028.852076][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2028.885902][T17347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.896832][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2028.920870][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2028.952666][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2028.992585][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2029.020624][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2029.043933][T17347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.063572][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2029.117433][T17454] ldm_validate_partition_table(): Disk read failed. [ 2029.124389][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2029.169296][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2029.190875][ T5782] Bluetooth: hci3: command tx timeout [ 2029.231934][T17454] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2029.277077][T17454] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2029.323282][T17454] Dev nbd6: unable to read RDB block 0 [ 2029.347635][T17454] nbd6: unable to read partition table [ 2029.398301][T17454] nbd6: partition table beyond EOD, truncated [ 2029.464376][T17454] ldm_validate_partition_table(): Disk read failed. [ 2029.507432][T17454] Dev nbd6: unable to read RDB block 0 [ 2029.513644][T17454] nbd6: unable to read partition table [ 2029.562420][T17454] nbd6: partition table beyond EOD, truncated [ 2031.103755][T17347] hsr_slave_0: entered promiscuous mode [ 2031.172694][T17347] hsr_slave_1: entered promiscuous mode [ 2031.211925][T17347] debugfs: 'hsr0' already exists in 'hsr' [ 2031.247172][T17347] Cannot create hsr debugfs directory [ 2031.277253][ T5782] Bluetooth: hci3: command tx timeout [ 2031.552548][T11819] bridge_slave_1: left allmulticast mode [ 2031.597721][T11819] bridge_slave_1: left promiscuous mode [ 2031.631735][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.718337][T11819] bridge_slave_0: left allmulticast mode [ 2031.724172][T11819] bridge_slave_0: left promiscuous mode [ 2031.783096][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.750533][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2032.812479][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2032.941237][T11819] bond0 (unregistering): Released all slaves [ 2033.348918][ T5782] Bluetooth: hci3: command tx timeout [ 2033.388325][T14350] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2034.568517][T14350] usb 7-1: Using ep0 maxpacket: 16 [ 2035.175184][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.185438][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.206185][T17412] bridge_slave_0: entered allmulticast mode [ 2035.221990][T17412] bridge_slave_0: entered promiscuous mode [ 2035.312430][T11819] hsr_slave_0: left promiscuous mode [ 2035.343719][T11819] hsr_slave_1: left promiscuous mode [ 2035.377860][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2035.407538][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2035.532813][T14350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2035.553127][T14350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.570663][T14350] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2035.583905][T14350] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2036.286721][T14350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.345778][T14350] usb 7-1: config 0 descriptor?? [ 2036.388652][T11819] team0 (unregistering): Port device team_slave_1 removed [ 2036.526141][T11819] team0 (unregistering): Port device team_slave_0 removed [ 2036.551726][T14350] usb 7-1: can't set config #0, error -71 [ 2036.564371][T14350] usb 7-1: USB disconnect, device number 39 [ 2037.625510][T17539] overlay: Unknown parameter '/' [ 2039.492782][T17412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.577819][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.585654][T17412] bridge_slave_1: entered allmulticast mode [ 2039.694084][T17412] bridge_slave_1: entered promiscuous mode [ 2040.532841][T17412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2040.870610][T17412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.607133][T17412] team0: Port device team_slave_0 added [ 2041.883665][T17412] team0: Port device team_slave_1 added [ 2042.417469][T17412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.486318][T17412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.586211][T17412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.840293][T17412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.873838][T17412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2043.016351][T17412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2043.154222][T17467] chnl_net:caif_netlink_parms(): no params data found [ 2045.443145][T17412] hsr_slave_0: entered promiscuous mode [ 2045.452895][T17412] hsr_slave_1: entered promiscuous mode [ 2045.462700][T17412] debugfs: 'hsr0' already exists in 'hsr' [ 2045.469903][T17412] Cannot create hsr debugfs directory [ 2046.866633][T11819] bridge_slave_1: left allmulticast mode [ 2046.893801][T11819] bridge_slave_1: left promiscuous mode [ 2046.908612][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.957144][T11819] bridge_slave_0: left allmulticast mode [ 2046.968139][T11819] bridge_slave_0: left promiscuous mode [ 2046.974633][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.068393][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.074989][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.406013][ T8410] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2047.478746][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2047.500288][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2047.565008][T11819] bond0 (unregistering): Released all slaves [ 2047.572213][ T8410] usb 7-1: Using ep0 maxpacket: 16 [ 2047.583899][ T8410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2047.602607][ T8410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2047.614070][ T8410] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2047.632864][ T8410] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2047.732976][ T8410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.823639][ T8410] usb 7-1: config 0 descriptor?? [ 2048.615803][ T8410] usbhid 7-1:0.0: can't add hid device: -71 [ 2048.631809][ T8410] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2048.656024][T11819] hsr_slave_0: left promiscuous mode [ 2048.679273][T11819] hsr_slave_1: left promiscuous mode [ 2048.705905][ T8410] usb 7-1: USB disconnect, device number 40 [ 2048.721403][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2048.752893][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2051.292864][T11819] team0 (unregistering): Port device team_slave_1 removed [ 2051.379083][T17605] overlay: Unknown parameter '/' [ 2052.179293][T11819] team0 (unregistering): Port device team_slave_0 removed [ 2053.922519][T17467] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.956125][T17467] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.963979][T17467] bridge_slave_0: entered allmulticast mode [ 2054.020337][T17467] bridge_slave_0: entered promiscuous mode [ 2054.079436][T17467] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.136035][T17467] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.143894][T17467] bridge_slave_1: entered allmulticast mode [ 2054.195907][T17467] bridge_slave_1: entered promiscuous mode [ 2054.951291][T17467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2055.070093][T17467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2055.230670][T17347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2055.459640][T17347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2055.547525][T17347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2055.849832][T17467] team0: Port device team_slave_0 added [ 2055.930583][T17347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2056.121411][T17467] team0: Port device team_slave_1 added [ 2056.804104][T17467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.839550][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.995733][T17467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2057.191556][T17467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2057.243448][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2057.380064][T17467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2059.110686][T17467] hsr_slave_0: entered promiscuous mode [ 2059.262262][T17467] hsr_slave_1: entered promiscuous mode [ 2059.330640][T17467] debugfs: 'hsr0' already exists in 'hsr' [ 2059.361033][T17467] Cannot create hsr debugfs directory [ 2063.080099][T17412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2063.223539][T17412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2063.528322][T17412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2063.651545][T17412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2063.766414][T13065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2063.776374][T13065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2063.788071][T13065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2063.817532][T13065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2063.844511][T13065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2064.734100][T17651] lo speed is unknown, defaulting to 1000 [ 2066.338446][ T5782] Bluetooth: hci5: command tx timeout [ 2068.816215][ T5782] Bluetooth: hci5: command tx timeout [ 2068.884198][T17651] wlan0 speed is unknown, defaulting to 1000 [ 2070.974743][ T5782] Bluetooth: hci5: command tx timeout [ 2071.096751][T17672] vcan0: entered allmulticast mode [ 2073.119796][ T5782] Bluetooth: hci5: command tx timeout [ 2075.096117][T17467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2075.201073][T17467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2075.226470][T13065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2075.249408][T13065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2075.262078][T13065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2075.279765][T13065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2075.298152][T13065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2075.447672][T17467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2075.695872][T17467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2077.427715][ T5782] Bluetooth: hci0: command tx timeout [ 2077.516498][T17694] lo speed is unknown, defaulting to 1000 [ 2079.306659][T17694] wlan0 speed is unknown, defaulting to 1000 [ 2079.504118][ T5782] Bluetooth: hci0: command tx timeout [ 2079.564638][T17651] chnl_net:caif_netlink_parms(): no params data found [ 2079.771318][ T12] bridge_slave_1: left allmulticast mode [ 2079.816460][ T12] bridge_slave_1: left promiscuous mode [ 2079.822976][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.349707][ T12] bridge_slave_0: left allmulticast mode [ 2080.400721][ T12] bridge_slave_0: left promiscuous mode [ 2080.445038][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2081.075657][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2081.169902][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2081.241653][ T12] bond0 (unregistering): Released all slaves [ 2081.584593][ T5782] Bluetooth: hci0: command tx timeout [ 2082.904731][ T12] hsr_slave_0: left promiscuous mode [ 2082.934128][ T12] hsr_slave_1: left promiscuous mode [ 2082.987267][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2083.019783][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2083.670183][ T5782] Bluetooth: hci0: command tx timeout [ 2083.954768][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2084.034076][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2084.799215][T13065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2084.844920][T13065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2084.891685][T13065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2084.911742][T13065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2084.933381][T13065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2085.477255][T17770] lo speed is unknown, defaulting to 1000 [ 2085.496819][T17770] wlan0 speed is unknown, defaulting to 1000 [ 2085.610954][T17785] loop5: detected capacity change from 0 to 256 [ 2085.783605][T17785] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 2086.321893][T17791] fuse: Bad value for 'fd' [ 2086.372213][T17694] chnl_net:caif_netlink_parms(): no params data found [ 2086.667015][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.687325][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2086.710047][T17651] bridge_slave_0: entered allmulticast mode [ 2086.735610][T17794] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2086.742649][T17651] bridge_slave_0: entered promiscuous mode [ 2087.023738][T13065] Bluetooth: hci2: command tx timeout [ 2087.204605][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 2087.222579][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.286897][T17651] bridge_slave_1: entered allmulticast mode [ 2087.333576][T17651] bridge_slave_1: entered promiscuous mode [ 2087.901791][T17651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2087.950002][T17651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2088.815233][T17651] team0: Port device team_slave_0 added [ 2088.954917][T17651] team0: Port device team_slave_1 added [ 2088.999780][ T12] bridge_slave_1: left allmulticast mode [ 2089.027159][ T12] bridge_slave_1: left promiscuous mode [ 2089.048572][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.088345][ T12] bridge_slave_0: left allmulticast mode [ 2089.140300][ T12] bridge_slave_0: left promiscuous mode [ 2089.158025][T13065] Bluetooth: hci2: command tx timeout [ 2089.171555][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.495601][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2090.565125][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2090.607483][ T12] bond0 (unregistering): Released all slaves [ 2090.658677][T17820] sctp: [Deprecated]: syz.5.2531 (pid 17820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2090.658677][T17820] Use struct sctp_sack_info instead [ 2091.043403][ T12] hsr_slave_0: left promiscuous mode [ 2091.054054][ T12] hsr_slave_1: left promiscuous mode [ 2091.080961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.101984][T17824] loop5: detected capacity change from 0 to 2048 [ 2091.118021][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2091.186129][T13065] Bluetooth: hci2: command tx timeout [ 2091.212363][T17824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2091.300485][ T29] audit: type=1800 audit(1772873557.122:315): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2532" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 2091.393677][T17824] loop5: detected capacity change from 2048 to 0 [ 2091.400995][T17610] buffer_io_error: 25 callbacks suppressed [ 2091.401064][T17610] Buffer I/O error on dev loop5, logical block 3, async page read [ 2091.435394][ C0] blk_print_req_error: 25 callbacks suppressed [ 2091.435470][ C0] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2091.451739][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 2091.459888][ C0] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 2091.477513][T17827] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.2532: reading directory lblock 0 [ 2091.494286][T17827] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2091.509929][T17827] EXT4-fs (loop5): I/O error while writing superblock [ 2091.717413][T15354] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #2: block 4: comm syz-executor: unable to read itable block [ 2091.797087][T15354] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2091.851238][T15354] EXT4-fs (loop5): I/O error while writing superblock [ 2091.860105][T15354] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: IO failure [ 2091.888305][T15354] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2091.903354][T15354] EXT4-fs (loop5): I/O error while writing superblock [ 2091.910486][T15354] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 2091.943798][T15354] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2091.952254][T15354] EXT4-fs (loop5): I/O error while writing superblock [ 2091.995524][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2092.031810][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2092.147539][ T53] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4905: inode #2: block 4: comm kworker/u8:3: unable to read itable block [ 2092.198240][ T53] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2092.221795][ T53] EXT4-fs (loop5): I/O error while writing superblock [ 2092.256737][T17597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2092.344927][T17597] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2092.353528][T17597] EXT4-fs (loop5): I/O error while writing superblock [ 2092.363618][T17825] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 2092.778734][T17651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2092.793324][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2092.836322][T17651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2092.890692][T17651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2092.898849][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2092.940143][T17651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2092.971854][T17770] chnl_net:caif_netlink_parms(): no params data found [ 2093.033303][T17694] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.045377][T17694] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.055174][T17694] bridge_slave_0: entered allmulticast mode [ 2093.071417][T17694] bridge_slave_0: entered promiscuous mode [ 2093.193593][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.201058][T17694] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.253889][T17694] bridge_slave_1: entered allmulticast mode [ 2093.267306][T13065] Bluetooth: hci2: command tx timeout [ 2093.317407][T17694] bridge_slave_1: entered promiscuous mode [ 2093.711195][T17694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2093.911150][T17694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2094.021266][T17651] hsr_slave_0: entered promiscuous mode [ 2094.057512][T17651] hsr_slave_1: entered promiscuous mode [ 2094.086243][T17651] debugfs: 'hsr0' already exists in 'hsr' [ 2094.092150][T17651] Cannot create hsr debugfs directory [ 2094.451956][T17694] team0: Port device team_slave_0 added [ 2094.517875][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.569344][T17694] team0: Port device team_slave_1 added [ 2094.742657][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.878175][T17694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2094.893174][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2094.955818][T17694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2095.128149][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.189021][T17694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2095.206131][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2095.294604][T17694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2095.522154][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.639150][T17770] bridge0: port 1(bridge_slave_0) entered blocking state [ 2095.647171][T17770] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.664954][T17770] bridge_slave_0: entered allmulticast mode [ 2095.696868][T17770] bridge_slave_0: entered promiscuous mode [ 2095.787458][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2095.804961][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2095.817706][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2095.840253][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2095.852648][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2095.914393][T17770] bridge0: port 2(bridge_slave_1) entered blocking state [ 2095.921889][T17770] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.944009][T17770] bridge_slave_1: entered allmulticast mode [ 2095.955244][T17770] bridge_slave_1: entered promiscuous mode [ 2096.230876][T17694] hsr_slave_0: entered promiscuous mode [ 2096.241931][T17694] hsr_slave_1: entered promiscuous mode [ 2096.255410][T17694] debugfs: 'hsr0' already exists in 'hsr' [ 2096.261312][T17694] Cannot create hsr debugfs directory [ 2096.341355][T17770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2096.537281][T17770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2096.786859][T17873] loop6: detected capacity change from 0 to 2048 [ 2096.880826][T17873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2096.965556][ T29] audit: type=1800 audit(1772873562.793:316): pid=17873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2540" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 2097.052338][T17863] lo speed is unknown, defaulting to 1000 [ 2097.148934][T15282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2097.171009][T17770] team0: Port device team_slave_0 added [ 2097.357930][T17863] wlan0 speed is unknown, defaulting to 1000 [ 2097.391409][T17770] team0: Port device team_slave_1 added [ 2097.903584][ T5782] Bluetooth: hci1: command tx timeout [ 2098.315023][T17770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2098.344819][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2098.437823][T17770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2098.625671][T17770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2098.663936][T17896] fuse: Bad value for 'fd' [ 2098.673602][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2098.773102][T17770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2099.692513][T17770] hsr_slave_0: entered promiscuous mode [ 2099.715016][T17770] hsr_slave_1: entered promiscuous mode [ 2099.734253][T17770] debugfs: 'hsr0' already exists in 'hsr' [ 2099.740164][T17770] Cannot create hsr debugfs directory [ 2099.984082][ T5782] Bluetooth: hci1: command tx timeout [ 2100.418764][T17651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2100.490270][T17651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2100.782439][T17651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2101.127422][T17651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2101.637353][ T12] bridge_slave_1: left allmulticast mode [ 2101.650893][ T12] bridge_slave_1: left promiscuous mode [ 2101.678801][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.703406][ T12] bridge_slave_0: left allmulticast mode [ 2101.732743][ T12] bridge_slave_0: left promiscuous mode [ 2101.739247][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.794030][ T12] bridge_slave_1: left allmulticast mode [ 2101.799864][ T12] bridge_slave_1: left promiscuous mode [ 2101.837148][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.864376][ T12] bridge_slave_0: left allmulticast mode [ 2101.870212][ T12] bridge_slave_0: left promiscuous mode [ 2101.898777][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.062824][ T5782] Bluetooth: hci1: command tx timeout [ 2102.815186][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2102.872009][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2102.923189][ T12] bond0 (unregistering): Released all slaves [ 2103.396089][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2103.514773][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2103.598792][ T12] bond0 (unregistering): Released all slaves [ 2103.644463][T17863] chnl_net:caif_netlink_parms(): no params data found [ 2104.143343][ T5782] Bluetooth: hci1: command tx timeout [ 2105.969756][T13371] wlan0 speed is unknown, defaulting to 1000 [ 2105.976094][T13371] infiniband syz1: ib_query_port failed (-19) [ 2106.286638][ T12] hsr_slave_0: left promiscuous mode [ 2106.324150][ T12] hsr_slave_1: left promiscuous mode [ 2106.332157][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2106.362450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2106.403833][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2106.411390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2106.567444][ T12] hsr_slave_0: left promiscuous mode [ 2106.587498][ T12] hsr_slave_1: left promiscuous mode [ 2106.595849][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2106.641486][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2106.740895][ T12] veth1_macvtap: left promiscuous mode [ 2106.758651][ T12] veth0_macvtap: left promiscuous mode [ 2106.795953][ T12] veth1_vlan: left promiscuous mode [ 2106.801491][ T12] veth0_vlan: left promiscuous mode [ 2108.238093][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2108.334001][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2108.487332][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.494560][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2108.870778][ T12] vcan0 (unregistering): left allmulticast mode [ 2109.431531][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2109.477634][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2110.054608][T17694] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2110.261287][T17694] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2110.442802][T17694] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2110.566497][T17694] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2110.965288][T17863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.990388][T17863] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.000158][T17863] bridge_slave_0: entered allmulticast mode [ 2111.016735][T17863] bridge_slave_0: entered promiscuous mode [ 2111.072740][T17863] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.092364][T17863] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.122994][T17863] bridge_slave_1: entered allmulticast mode [ 2111.187342][T17863] bridge_slave_1: entered promiscuous mode [ 2111.757862][T17863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.933977][T17863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2112.088217][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.367365][T17770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2112.490469][T17863] team0: Port device team_slave_0 added [ 2112.519841][T17863] team0: Port device team_slave_1 added [ 2112.578679][T17770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2112.791823][T17770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2112.987183][T17863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2113.006008][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.112102][T17863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2113.161427][T17770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2113.237356][T17863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2113.272439][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.386862][T17863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2113.619521][T17651] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.869987][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.877571][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.116516][T17863] hsr_slave_0: entered promiscuous mode [ 2114.127164][T17863] hsr_slave_1: entered promiscuous mode [ 2114.137739][T17863] debugfs: 'hsr0' already exists in 'hsr' [ 2114.202426][T17863] Cannot create hsr debugfs directory [ 2114.358602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.366200][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.341180][T17694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.791291][T17694] 8021q: adding VLAN 0 to HW filter on device team0 [ 2117.021487][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 2117.029097][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.288950][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.296580][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2117.676700][T17863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2117.812481][T17863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2117.976518][T17863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2118.097322][T17770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2118.156943][T17863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2118.525934][T17770] 8021q: adding VLAN 0 to HW filter on device team0 [ 2118.660797][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.668314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2118.888685][T17651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2119.016547][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 2119.024127][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2120.088854][T17651] veth0_vlan: entered promiscuous mode [ 2120.409505][T17651] veth1_vlan: entered promiscuous mode [ 2120.615962][T17694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2120.894234][T17863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2121.297925][T17863] 8021q: adding VLAN 0 to HW filter on device team0 [ 2121.486257][T17651] veth0_macvtap: entered promiscuous mode [ 2121.590987][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.598403][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.762724][T17651] veth1_macvtap: entered promiscuous mode [ 2121.798500][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.806103][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.969289][T17770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2122.010508][T17694] veth0_vlan: entered promiscuous mode [ 2122.163015][T17651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2122.278981][T17651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2122.308922][T17694] veth1_vlan: entered promiscuous mode [ 2122.435126][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.451172][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.529626][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.556249][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.094735][T17770] veth0_vlan: entered promiscuous mode [ 2123.157452][T17694] veth0_macvtap: entered promiscuous mode [ 2123.299295][T17770] veth1_vlan: entered promiscuous mode [ 2123.343438][T17694] veth1_macvtap: entered promiscuous mode [ 2123.726968][T17694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.907284][T17694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2124.198783][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.269960][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.272028][T13065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2124.295093][T13065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2124.305225][T13065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2124.324823][T13065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2124.342918][T13065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2124.425034][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.487043][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.541032][T17770] veth0_macvtap: entered promiscuous mode [ 2124.713934][T17770] veth1_macvtap: entered promiscuous mode [ 2124.975228][T18085] lo speed is unknown, defaulting to 1000 [ 2125.292411][T17770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2125.575208][T17770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2125.633359][T17863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2125.893514][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.044416][ T5928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.141082][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.347983][ T5928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.391485][ T5782] Bluetooth: hci3: command tx timeout [ 2126.401547][ T5928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.410528][ T5928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.507675][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.745644][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.159257][T18085] chnl_net:caif_netlink_parms(): no params data found [ 2128.013059][ T12] bridge_slave_1: left allmulticast mode [ 2128.018893][ T12] bridge_slave_1: left promiscuous mode [ 2128.083502][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.112069][ T12] bridge_slave_0: left allmulticast mode [ 2128.131301][ T12] bridge_slave_0: left promiscuous mode [ 2128.137834][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.482117][ T5782] Bluetooth: hci3: command tx timeout [ 2128.852859][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2128.893860][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2128.925045][ T12] bond0 (unregistering): Released all slaves [ 2129.369194][ T12] hsr_slave_0: left promiscuous mode [ 2129.415501][ T12] hsr_slave_1: left promiscuous mode [ 2129.451978][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2129.497134][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2129.531996][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2129.570704][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2129.651814][ T12] veth1_macvtap: left promiscuous mode [ 2129.657519][ T12] veth0_macvtap: left promiscuous mode [ 2129.695132][ T12] veth1_vlan: left promiscuous mode [ 2129.700780][ T12] veth0_vlan: left promiscuous mode [ 2130.541862][ T5782] Bluetooth: hci3: command tx timeout [ 2130.610861][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2130.674315][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2131.331546][T17863] veth0_vlan: entered promiscuous mode [ 2131.698378][T18085] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.731660][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.739512][T18085] bridge_slave_0: entered allmulticast mode [ 2131.768896][T18085] bridge_slave_0: entered promiscuous mode [ 2131.789098][T18085] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.800754][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.831134][T18085] bridge_slave_1: entered allmulticast mode [ 2131.840540][T18085] bridge_slave_1: entered promiscuous mode [ 2132.139981][T17863] veth1_vlan: entered promiscuous mode [ 2132.169582][T18085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2132.258857][T18085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2132.292020][T10944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.300015][T10944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.508441][T18085] team0: Port device team_slave_0 added [ 2132.558510][T18085] team0: Port device team_slave_1 added [ 2132.621114][ T5782] Bluetooth: hci3: command tx timeout [ 2132.918351][T18085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.928791][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2132.968754][T18085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.987422][T18085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2132.995120][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2133.026633][T18085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2133.069080][T17863] veth0_macvtap: entered promiscuous mode [ 2133.126165][T12592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2133.167930][T12592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.184985][T17863] veth1_macvtap: entered promiscuous mode [ 2133.560346][T18085] hsr_slave_0: entered promiscuous mode [ 2133.579609][T18085] hsr_slave_1: entered promiscuous mode [ 2133.609323][T18085] debugfs: 'hsr0' already exists in 'hsr' [ 2133.626189][T18085] Cannot create hsr debugfs directory [ 2133.809390][T17863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2134.137205][T17863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2134.445374][ T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.451411][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.485311][ T82] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.490878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.667118][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 2134.726648][ T82] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.750992][ T82] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.308039][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2135.346706][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2136.650812][T18085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2136.712009][T18085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2136.776811][T18085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2136.881327][T18085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2138.206231][T18171] ===================================================== [ 2138.213891][T18171] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 2138.221264][T18171] batadv_get_vid+0x2ce/0x3b0 [ 2138.226137][T18171] batadv_interface_tx+0x2e8/0x1dd0 [ 2138.231655][T18171] dev_hard_start_xmit+0x24e/0xad0 [ 2138.237270][T18171] __dev_queue_xmit+0x3412/0x5980 [ 2138.242615][T18171] __bpf_redirect+0x162e/0x1760 [ 2138.247875][T18171] bpf_clone_redirect+0x4a6/0x6c0 [ 2138.253216][T18171] ___bpf_prog_run+0x12af/0xeb60 [ 2138.258505][T18171] __bpf_prog_run512+0xc5/0x100 [ 2138.263699][T18171] bpf_test_run+0x493/0xdf0 [ 2138.268505][T18171] bpf_prog_test_run_skb+0x22a5/0x3050 [ 2138.274392][T18171] bpf_prog_test_run+0x5bb/0x9f0 [ 2138.279543][T18171] __sys_bpf+0x925/0xee0 [ 2138.284106][T18171] __x64_sys_bpf+0xa4/0xf0 [ 2138.288651][T18171] x64_sys_call+0x13d0/0x3ea0 [ 2138.293629][T18171] do_syscall_64+0x134/0xf80 [ 2138.298443][T18171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2138.304636][T18171] [ 2138.307028][T18171] Uninit was created at: [ 2138.311699][T18171] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 2138.317816][T18171] pskb_expand_head+0x2ef/0x1fb0 [ 2138.323216][T18171] skb_ensure_writable+0x44e/0x510 [ 2138.328526][T18171] bpf_clone_redirect+0x301/0x6c0 [ 2138.333878][T18171] ___bpf_prog_run+0x12af/0xeb60 [ 2138.338965][T18171] __bpf_prog_run512+0xc5/0x100 [ 2138.344150][T18171] bpf_test_run+0x493/0xdf0 [ 2138.348777][T18171] bpf_prog_test_run_skb+0x22a5/0x3050 [ 2138.354549][T18171] bpf_prog_test_run+0x5bb/0x9f0 [ 2138.359645][T18171] __sys_bpf+0x925/0xee0 [ 2138.364138][T18171] __x64_sys_bpf+0xa4/0xf0 [ 2138.368690][T18171] x64_sys_call+0x13d0/0x3ea0 [ 2138.373727][T18171] do_syscall_64+0x134/0xf80 [ 2138.378460][T18171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2138.384643][T18171] [ 2138.387047][T18171] CPU: 1 UID: 0 PID: 18171 Comm: syz.2.2573 Not tainted syzkaller #0 PREEMPT(full) [ 2138.396757][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2138.407067][T18171] ===================================================== [ 2138.414255][T18171] Disabling lock debugging due to kernel taint [ 2138.420601][T18171] Kernel panic - not syncing: kmsan.panic set ... [ 2138.427157][T18171] CPU: 1 UID: 0 PID: 18171 Comm: syz.2.2573 Tainted: G B syzkaller #0 PREEMPT(full) [ 2138.438292][T18171] Tainted: [B]=BAD_PAGE [ 2138.442526][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2138.452687][T18171] Call Trace: [ 2138.456039][T18171] [ 2138.459041][T18171] __dump_stack+0x26/0x30 [ 2138.463527][T18171] dump_stack_lvl+0x50/0x1c0 [ 2138.468257][T18171] ? dump_stack+0x12/0x25 [ 2138.472836][T18171] dump_stack+0x1e/0x25 [ 2138.477157][T18171] vpanic+0x7b4/0x1430 [ 2138.481419][T18171] panic+0x15d/0x160 [ 2138.485526][T18171] kmsan_report+0x31a/0x320 [ 2138.490214][T18171] ? __msan_warning+0x1b/0x30 [ 2138.495051][T18171] ? batadv_get_vid+0x2ce/0x3b0 [ 2138.500077][T18171] ? batadv_interface_tx+0x2e8/0x1dd0 [ 2138.505632][T18171] ? dev_hard_start_xmit+0x24e/0xad0 [ 2138.511091][T18171] ? __dev_queue_xmit+0x3412/0x5980 [ 2138.516462][T18171] ? __bpf_redirect+0x162e/0x1760 [ 2138.521661][T18171] ? bpf_clone_redirect+0x4a6/0x6c0 [ 2138.527029][T18171] ? ___bpf_prog_run+0x12af/0xeb60 [ 2138.532275][T18171] ? __bpf_prog_run512+0xc5/0x100 [ 2138.537446][T18171] ? bpf_test_run+0x493/0xdf0 [ 2138.542243][T18171] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 2138.548058][T18171] ? bpf_prog_test_run+0x5bb/0x9f0 [ 2138.553317][T18171] ? __sys_bpf+0x925/0xee0 [ 2138.557863][T18171] ? __x64_sys_bpf+0xa4/0xf0 [ 2138.562569][T18171] ? x64_sys_call+0x13d0/0x3ea0 [ 2138.567580][T18171] ? do_syscall_64+0x134/0xf80 [ 2138.572468][T18171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2138.578686][T18171] ? kernel_text_address+0x10e/0x1a0 [ 2138.584158][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.589464][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.595455][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.600747][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.606742][T18171] ? batadv_interface_tx+0xc1/0x1dd0 [ 2138.612211][T18171] ? filter_irq_stacks+0x49/0x190 [ 2138.617533][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.622830][T18171] __msan_warning+0x1b/0x30 [ 2138.627495][T18171] batadv_get_vid+0x2ce/0x3b0 [ 2138.632350][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.638354][T18171] batadv_interface_tx+0x2e8/0x1dd0 [ 2138.643740][T18171] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2138.650249][T18171] ? __pfx_batadv_interface_tx+0x10/0x10 [ 2138.656070][T18171] dev_hard_start_xmit+0x24e/0xad0 [ 2138.661394][T18171] __dev_queue_xmit+0x3412/0x5980 [ 2138.666591][T18171] ? skb_release_data+0x107c/0x11b0 [ 2138.672133][T18171] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 2138.678573][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.683874][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.689879][T18171] ? __dev_queue_xmit+0x27a/0x5980 [ 2138.695164][T18171] ? pskb_expand_head+0x1c0e/0x1fb0 [ 2138.700513][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.705827][T18171] __bpf_redirect+0x162e/0x1760 [ 2138.710871][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.716170][T18171] bpf_clone_redirect+0x4a6/0x6c0 [ 2138.721408][T18171] ___bpf_prog_run+0x12af/0xeb60 [ 2138.726520][T18171] __bpf_prog_run512+0xc5/0x100 [ 2138.731532][T18171] ? kmsan_internal_poison_memory+0x78/0x90 [ 2138.737600][T18171] ? kmsan_internal_poison_memory+0x4a/0x90 [ 2138.743651][T18171] ? kmsan_slab_alloc+0xdc/0x160 [ 2138.748750][T18171] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 2138.754603][T18171] ? slab_build_skb+0x5c/0x5b0 [ 2138.759520][T18171] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 2138.765257][T18171] ? bpf_prog_test_run+0x5bb/0x9f0 [ 2138.770516][T18171] ? __sys_bpf+0x925/0xee0 [ 2138.775060][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.780362][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.786368][T18171] ? bpf_test_run+0x81/0xdf0 [ 2138.791078][T18171] ? filter_irq_stacks+0x49/0x190 [ 2138.796293][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.801586][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.806872][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.812155][T18171] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2138.818659][T18171] ? kmsan_get_metadata+0x146/0x160 [ 2138.824032][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.830017][T18171] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2138.835625][T18171] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2138.841228][T18171] bpf_test_run+0x493/0xdf0 [ 2138.845860][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.851847][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.857132][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.863142][T18171] ? bpf_test_run+0x2f4/0xdf0 [ 2138.867952][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.873238][T18171] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2138.879348][T18171] bpf_prog_test_run_skb+0x22a5/0x3050 [ 2138.885022][T18171] ? kmsan_get_metadata+0xf1/0x160 [ 2138.890395][T18171] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2138.896393][T18171] bpf_prog_test_run+0x5bb/0x9f0 [ 2138.901506][T18171] __sys_bpf+0x925/0xee0 [ 2138.905925][T18171] __x64_sys_bpf+0xa4/0xf0 [ 2138.910471][T18171] x64_sys_call+0x13d0/0x3ea0 [ 2138.915317][T18171] do_syscall_64+0x134/0xf80 [ 2138.920033][T18171] ? clear_bhb_loop+0x50/0xa0 [ 2138.924852][T18171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2138.930895][T18171] RIP: 0033:0x7f0869b9c799 [ 2138.935415][T18171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2138.955160][T18171] RSP: 002b:00007f086aa0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2138.963722][T18171] RAX: ffffffffffffffda RBX: 00007f0869e15fa0 RCX: 00007f0869b9c799 [ 2138.971809][T18171] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 2138.979879][T18171] RBP: 00007f0869c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2138.987954][T18171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2138.996024][T18171] R13: 00007f0869e16038 R14: 00007f0869e15fa0 R15: 00007fff14baf9a8 [ 2139.004141][T18171] [ 2139.007538][T18171] Kernel Offset: disabled [ 2139.011903][T18171] Rebooting in 86400 seconds..