last executing test programs: 8m13.135194427s ago: executing program 0 (id=561): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f00000000c0), 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 8m12.677017547s ago: executing program 0 (id=563): socket$nl_xfrm(0x10, 0x3, 0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000), 0x84880) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400001, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x400, 0xf, 0x5, 0x344}, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) 8m10.842712917s ago: executing program 0 (id=567): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xb8, 0x3, 0x40, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r3, &(0x7f00000014c0), 0x0}, 0x20) 8m10.064073647s ago: executing program 0 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 7m58.479343212s ago: executing program 0 (id=594): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) syz_pidfd_open(r1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 7m57.031750233s ago: executing program 0 (id=597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_setup(0x6, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x208) semop(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r6, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 7m49.257451236s ago: executing program 3 (id=610): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001300128009000100766c616e000000000c00028006000100000000", @ANYRES32=0x0, @ANYBLOB="517ae3ed05b64a82e2feb1e9abed48b64e35142263fd944164109056432dc9003cc7a51da952f0fde6feded311ed55a064c67323194fdc47202ce2c89943ff3d38d7e311bdf9439240a1693e3bf6286e807f90b11e931d614c45164697"], 0x44}}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x2, 0x7f03) chdir(&(0x7f0000000140)='./bus\x00') getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd612, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 7m41.690553712s ago: executing program 32 (id=597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_setup(0x6, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x208) semop(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r6, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 7m41.687734099s ago: executing program 3 (id=623): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905", @ANYBLOB='\v'], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x15d903, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 7m38.055845402s ago: executing program 3 (id=629): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b", 0x12, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 7m34.141343199s ago: executing program 3 (id=633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 7m28.089379165s ago: executing program 3 (id=643): sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f0000000040)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0xbd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x2c, 0x26, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xf, 0xfff2}, {0x4, 0xa}, {0x3, 0x8}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x20000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 7m17.693584148s ago: executing program 3 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 7m1.611175524s ago: executing program 33 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 19.849230066s ago: executing program 5 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 18.225268027s ago: executing program 5 (id=1248): sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f0000000040)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) ioctl$NBD_SET_SOCK(r7, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0xbd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x2c, 0x26, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xf, 0xfff2}, {0x4, 0xa}, {0x3, 0x8}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 15.010875016s ago: executing program 5 (id=1250): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fspick(0xffffffffffffffff, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) 13.288425439s ago: executing program 5 (id=1253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.726093656s ago: executing program 1 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r5, 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, r0, 0x37, 0x202c}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) 11.704959356s ago: executing program 2 (id=1258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x60}, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) 11.223472359s ago: executing program 2 (id=1259): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000240), 0x0, 0x0, 0x3) 10.973285762s ago: executing program 1 (id=1260): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000240), 0x0, 0x0, 0x3) 9.736836842s ago: executing program 1 (id=1261): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 8.995268313s ago: executing program 4 (id=1262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) creat(0x0, 0x1a9) truncate(&(0x7f0000000240)='./file0\x00', 0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe9c, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) 8.645931709s ago: executing program 2 (id=1263): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0xff) fspick(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) 8.138583951s ago: executing program 5 (id=1264): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fspick(0xffffffffffffffff, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) 8.022769818s ago: executing program 4 (id=1265): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2, 0x8, 0x7, 0x7, 0x40, @empty, @loopback, 0x20, 0x20, 0x7ff0}}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x2, 0x305}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000200)=0xffefffdc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) 7.417010671s ago: executing program 4 (id=1266): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 7.029581735s ago: executing program 5 (id=1267): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r4, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 7.027026244s ago: executing program 2 (id=1268): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.91281098s ago: executing program 1 (id=1269): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) 3.57867853s ago: executing program 4 (id=1270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x60}, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) 3.553801829s ago: executing program 1 (id=1271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}]}, 0x24}, 0x1, 0x0, 0x0, 0x410}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$eJzs3U9vHGcdB/Df/vHacds0qlAVIg5uyp+W0vxPoPxryoEDHEBCPZPIdauUFFASEK0i4soHxAV4CXDphUPfAi+grwHxAoiU9NQDZdDYz+OMN+usTeKZXT+fj7SZ+c2z430m3x3PrGdmJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+NEPf3a2FxFXfpsmHIt4OgYR/Ygjdb0S9cjl/PxhRByPzeZ4PiIGixH1/Jv/PBtxISI+ORpx7/7t1XryuT324+KZWzc+//EP/vmHP28cf/etn3803v7TL5z/+I93Io795LWPP7/zZJYdAAAASlFVVdVLH/NPpM/3/a47BQC0Im//qyRPV6vVavUTrf/U38/zn36q6/6qD2ndVE12p1lExHpznnqfweF4AJgz6/FZ112gQ/Iv2jAinuq6E8BM63XdAQ7Evfu3V3sp315ze7Cy1Z7/Trkj//Xe9vUduw2nGT/HpK3310YM4rld+nOkpT7Mkpx/fzz/K1vto/S8g86/LbvlP9q69Kk4Of/BeP5jduT/l4iY2/z7E/MvVc5/uJ/81wdzvP7LHwAAAACAwy///f9Yx8d/Fx9/UfbkUcd/V1rqAwAAAAAAAAA8aY97/79t7v8HAAAAM6v+rF7769EH03b7LrZ6+pu9iGfGng8UZqXx5YAAAAAAAAAAAAAAQDuGEcvpvP6FiHhmebmqqvrRNF7v1+POP+9KX34oWde/5AEAYMsnR8eu5e9FLEXEm+m7/haWl5eraiEilqsji3l/drS4VB1pfK7Nw3ra4mgPO8TDUVX/sKXGfE3TPi9Pax//efVrjarBHjrWjg4DB4CI2Noa3bNFOmSq6tnoei+H+WD9P3ys/+xF1+9TAAAA4OBVVVX10td5n0jH/PtddwoAaEXe/o8fF1Cr1epi6k+3Js5Mf9TqA6ybqsnuNIuIWG/OU+8zuB0/AMyZ9fis6y7QIfkXbRgRx7vuBDDTel13gANx7/7t1V7Kt9fcHqxstedzQXbkv97bnC/PP2k4zfg5Jm29vzZiEM/t0p/nW+rDLMn598fzv7LVnm/xv53P0sHk35bd8q+X81gH/elazn8wnv+Yg17/27IR/Yn5lyrnP9xX/gP5AwAAAADADMt//z/m+G9eZAAAAAAAAACYO/fu317N173m4/9fmvC8XnPM9Z+HRs6/t+f8Xf97mOT8++P5j52QM2iM333jQf6f3r+9+tGtf38xD2c+/4XBqH7thV5/MEzn/FQLb8e1uB5rceah5w93tJ99qH1hR/u5Ke3nH2of1e1HcvupWI1fxfV4a7t9ccqJUUtT2qsp7Tn/gfW/SDn/YeNR57+c2ntjw9rdD/sPrffN4aTXufz3/3z14bWrDcMd1UYMtpet4Wj9z8nW+vTA5v/JU6P4zc21G6d+d/XWrRtnIw12TD0XafCE5fwX0iPn/9KLW+35935zfb374Wjf+c+KjRhOyn/z/f1iY7xe3pdb7lsXcv6j9Mj55y3Q5PV/nvOfuP5vLt8rHfQHAAAAAAAAAAAAAAAAHqWqqs1LRC9HxKV0/U9X12YCAO3K2/8qydPVarVarVYfvrqpmuz1ZhER/2jOU+8z/H7SDwMAZtl/I+JfXXeCzsi/YPn7/urhl7vuDNCqm+9/8Iur16+v3bjZdU8AAAAAAAAAgP9Xvv/nSuP+z5vnAY3dN3rH/V/fiJW5vf9nfzTYvNd5WqAX4tH3/z4Zj77/93DK6y1MaR9NaV+c0r40pX3ihR4NOf8XUsY5/xNpwUq6/+tLHfSnazn/k+lezzn/r409r5l/9bd5zr+/I//Tt9779emb73/w6rX3rr6z9s7aL8+euXTh/MUL5y9ePP32tetrZ7b+7bDHByvnn+997TzQsuT8c+byL0vO/yupln9ZUv7bu6HyL0te//P+nvzLkvPPn33kX5ac/8upln9Zcv5fT7X8y5LzfyXV8i9Lzv8bqZZ/WXL+r6Za/mXJ+Z9KtfzLkvM/nWr5lyXnn49wyb8sOf98ZoP8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf9LqZZ/WXL+30y1/MuS8/9WquVflpz/a6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dT/aj8322xX7Qj5/+9VFv/y5Lz/36q5V+WnP/rqZZ/WR58/7+RfY8sz0Y3jBh58iNd/2YCAAAAAAAAAAAAAMa1cTpx18sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17jZGrvO8HfvZmrw0B/8OdOGCbm4GF3fUNHGIwScifkl4oCWnTkhrHXhsnvtW7TgChsim0JQpSkdoX9EXTJEqiSG0FqiI1lWiE1Ejtm6p51QhVilopUl0JKgcllVIFtjpznufZmdnZmbW9a5855/OJ8M/eOWfmmTNnZve70XcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2cYPT/3RQJZl+X+NP9Zl2cX539dku/N/zu640CsEAAAAztU7jT//6tL0hd1L2Klpm3+87l++Mzc3N5d95u1T7/7J3Fy6YEOWDa3OssZl0T/9/GdzzdsEz2WjA4NN/x7scfNDPS4f7nH5SI/LV/W4fHWPy0d7XL7gACywpvh9TOPKbmz8dV1xSLPLs5HGZTd22Ou5gdWDg/F3OQ0DjX3mRg5kh7LD2VQ2sWCfgcb/suy1jfltPZjF2xpsuq31WZad/skz++IaBsIxvjFrubGG5sfurfuzDW//5Jl935p585pOs+dhWLDSLNu8KV/n81k2/+uqbCBbnY5JXOdg0zrXd1jnUMs6Bxr75X9vX+fpJa4z3u/RsM4fdFnn+vC1J2/Ismw2W3Sbds9lg9natltNx3u0OCPy68gfyvdmw2d0nmxcwnmS7/PjG1rPk/ZzMh7/jeGYDC+yhuaH460vrlpw3M/2PMnvdRnO1fy6H85vdHS0+VerLedqvs0zNy1+DnR87DqcA+lcbjoHNvU6BwZXDTXOgcH5NW9qOQcmF+wzmA00buvUTd3PgfGZI8fHp596+o5DR/YenDo4dXRyYse2rdu3bd2+ffzAocNTE8WfZ3ZI+8jabDCdg5vCa008B29p27b5lJz72vI9D0ZL8jzI7/snbs4XdPFgtsg5nm/z/OZzfx6k7/tNz4PhpudBx9fUDs+D4SU8D/JtTm9e2vfM4ab/Oq1hpV4L1zWdAxfy+2F+m4/duvhr4fqwrhduO9Pvh0MLzoF4twbCcy//Svp5b/TucFwWnhfX5hdctCo7OT114s4n987MnJjMwjgvLmt6rNrPl7VN9ylbcL4MnvH5svsvf3HztR2+vi4cq9Hb5x+rVR0eh3ybbWPdH6vGq3vn49ny1S1ZGMvsfB/PTt/N8uOZskSXcz/f5vk7zv1nwZRLml7/Rnq9/g2NDBevf0PpaIy0vP4tfGiGGivLstN3LO31byT8d75f/y4vyetffqweu7P7OZBv88L4mZ4Dw11f/24IcyCs59aQGEabcv+7jctni9O06bHsed4MD4+E82Y43mLrebN1wT75teW3vXni7M6bzTe0PlYtP7dU8LzJj9WfTnQ/b/JtXp8899eONfGvTa8dq3qdAyNDq/L1jqSToHi9m1sTz4E7s33Zsexwtj/tkz/K+W2NbVnaObAq/He+XzuuLsk5kB+rl7d0Pwfybb6/dXl/dtocvpK2afrZqf33C4tl/muH56+v/bAtd+bP1/mRbd1/N5Rv8+a2M80Z3Y/T7eErF3U4Tu3Pn8XO6f3Z+TlOV4d1Ht7e/XdT+TaX71ji+bQ7y7I3Jt9o/L4r/H73b07+63dafu/b6XfKb0y+8dD4Iz88k/UDAHD23m38Obuq+Fmz6f+xXsr//w8AAAD0hZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/n7h75yvvPJuldwOcC+Ll8TA8fG+xXex4z4Z/b5ibl3/9Q98YeeVLzy7ttgezLPvFQ+/ruP0T98Z1FY7HdX6g9esLXH39km7/8Ufnt2t+/4TTO4vrj/dnqadB7Cq/Nr6lcb0bnppszNcfyhrzkdkXniuuv/h33P7U1mL7Pw9vWrL7wEDL/pvDem4Mc0N4T5mHd88fh3zG/V5Zf90/XPbJ+duL+w1suqRxN1/+veJ643tEvXRZsX2834ut/++//O1X8u2fvKnz+p8d7Lz+U+F6fxzmz3cV2zcf8y81rf8Pwvrj7cX97vz69zqu/9Wriu1fDefFV8NsX//9f/z+dzo9XvF2dt9T7Bdvf+J/tjX2i9cXr799/aPPTrYcj/brf/3t4np2ff6nQ83bx6/H24kev6f1/B4Ij29LjzzLsm//YdZynLMPFvv9Xdv64/Udv6fz+m9vW+fxgesb+8/fn3Ut9+sr39zS8f7G9ez+63Ut9+elB8Lxe3v8+/n1nnoknI/h8v/9QXF97e9l+uoDra83cfuvriuet/H6xtvW/1Lb+mevz49d7/U/+Hax/lfvW92y/t0fDefTg8Xstf6Df3Fpy/5f+1bxeJz4wtjRY9MnD+0Pd2Zd2/N49eiatRdd/J5LLg2vpe3/3nNs5ompExsmNkxk2YY+fMvAlV7/18P872LMLv8tFH740+K8e/FjxfetW35W/Pul8PXHw+MZvz9+5c9GWs7X9sd99r5inuv6bwvrWKqrvvwf13f48n8ueM/fU59+7eTf/v6b7T8XxPtz/IrRxv17eeOVjcsGXi8ub3+96uXfr2h9Xv9oeKIxvxuO61x4Z+ZNVxa313798b1JXvx48fyNP8nF/bO29xNZN9R6P851/T8KP8d87+rW1794fnz32bZ3c16XDeRLmA2vD9lscXncKh7vF09f2fH24vvwZLPXnMkyFzX91PT44UNHTz45PjM1PTM+/dTTe44cO3l0Zk/jvUv3fLbX/vPP77WN5/f+qR3bssaz/VgxVtiFXv/xR/ftv2vi5v1TB/aePDDz6PGpEwf3TU/vm9o/ffPeAwemvtBr/0P7d01u2bn1ri1jBw/t33X3zp1bd44dOnosX0axqB52THxu7OiJPY1dpndt2zm5ffu2ibEjx/ZP7bprYmLsZK/9G9+bxvK9Pz92Yurw3plDR6bGpg89PbVrcueOHVt6vvvjkeMHpjeMnzh5dPzk9NSJ8eK+bJhpfDn/3tdrf+ph+lh4vWszEH46/9TtO9L74+a+8cVFr6rYpPXH0+yt8F5Q8ftbr3/H3D8SZlKT/A8AAAB1EHN/eOP/+QvkfwAAAKiMmPtXh5nI/wAAAFAZMfePhpnUJP/r/+v/6//r/+v/n8f+f6b/v9z0/5el/7+Q/v+S6P/r/+v/6//TXdn6/zH3r8myWuZ/AAAAqIOY+9eGmcj/AAAAUBkx918UZiL/AwAAQGXE3H9xmEk98v9I+1/1//X/9f+b+/9xW/3/TP9f//8s6f/r/3ej/6//38/rL2H/f43+P2VTtv5/zP3vCTOpR/4HAACAWoi5/5IwE/kfAAAAKiPm/kvDTOR/AAAAqIyY+9eFmdQk//v8f/1//X+f/6//r/+/kvT/9f+70f/X/+/n9Zew/+/z/ymdsvX/Y+7/f2EmNcn/AAAAUAcx9783zET+BwAAgMqIuf+yMBP5HwAAACoj5v7Lw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+K8JMapL/AQAAoA5i7r8yzET+BwAAgMqIuf+qMBP5HwAAACoj5v6rw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+a8JMapL/AQAAoA5i7r82zET+BwAAgMqIuf99YSbyPwAAAFRGzP3rw0xqkv/1//X/S9//H9T/1/8v6P/r/3eyvP3/wUUv0f8v6P+30v/X/9f/1/+nu7L1/2Puf3+YSU3yPwAAANRBzP3XhZnI/wAAAFAZMfdfH2Yi/wMAAEBlxNy/IcykJvlf/1//v/T9f5//r/8fZu36/zMD+v9L4PP/9f8z/f+zdqH78/2+fv1//X96K1v/P+b+jWEmNcn/AAAAUAcx928KM5H/AQAAoDJi7r8hzET+BwAAgMqIuf/GMJOa5H/9/7Ps/69p/af+f+f16//r/+v/+/x//X/9/270//X/+3n9+v9L6/+v6nVFVFrZ+v8x998UZlKT/A8AAAB1EHP/zWEm8j8AAABURsz9t4SZyP8AAABQGTH3bw4zqUn+1//3+f/6//r/+v/6/ytJ/3/J/f81Z7Mu/f+C/v/ZudD9+X5ffz/1/0c77O/z/zkfytb/j7n/1jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7r89zET+BwAAgMqIuX8szKQm+V//X/9f/1//X/9f/38lVbX/n15Hff6//r/+v/7/Cvf/v7nI/v3y+f/UW9n6/zH33xFmUpP8DwAAAHUQc/+dYSbyPwAAAFRGzP3jYSbyPwAAAFRGzP0TYSY1yf/6//r/+v/6//r/+v8rqar9//bP/8+yTP9f/z/R/9f/L9vn/3ei/8/5ULb+f8z9k2EmNcn/AAAAUAcx928JM5H/AQAAoDJi7t8aZiL/AwAAQGXE3L8tzKQm+V//X/9f/1//X/9f/38l1aX/7/P/i8v1/wv6//r/+v/6/3U02OFrZev/x9y/PcykJvkfAAAA6iDm/h1hJvI/AAAAVEbM/XeFmcj/AAAAUBkx998dZlKT/K//r/+v/6//X97+f+vtr1z//7/0/1eQ/r/+fzf6//r//bx+/X/9f3pb3v7/pefc/4+5f2eYSU3yPwAAANRBzP0fCDOR/wEAAKAyYu6/J8xE/gcAAIC+0ulzCKOY+z8YZlKT/K//X/X+/9xq/X/9//7t/7ceT5//r//fSXj51P9fonr1/9csuD39/1YXuj/f7+vX/9f/p7fl7f8v+PH0jPv/MffvCjOpSf4HAACAOoi5/94wE/kfAAAAKiPm/vvCTOR/AAAAqIyY+3eHmdQk/+v/V73/X77P/x/I9P/1/wv6//r/y8Hn/+v/Zz7//6ydbX8+vu+G/n95+v/5OaT/TxmVrf8fc//9YSY1yf8AAABQBzH3fyjMRP4HAACAyoi5/8NhJvI/AAAAVEbM/R8JM6lJ/tf/1//3+f/6//r/+v8rSf9f/78b/f/+7P9H+v/l6f/7/H/Kqmz9/5j7HwgzqUn+BwAAgDqIuf+jYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/wTCTmuR//X/9f/1//X/9f/3/laT/r//fjf6//n8/r1//X/+f3srW/4+5/5fCTGqS/wEAAKAOYu5/KMxE/gcAAIDKiLn/Y2Em8j8AAABURsz9vxxmUpP8r/9/fvr/g+n69f/1//X/9f/1/5dTn/b/R/X/C/r/+v/9vH79f/1/eitb/z/m/l8JM6lJ/gcAAIA6iLn/V8NM5H8AAACojJj7fy3MRP4HAACAyoi5/+Ewk5rkf/1/n/+v/6//X9r+/3Dr8dT/1//vpE/7/z7/P9D/1//v5/Xr/+v/01vZ+v8x9/96mElN8j8AAADUQcz9j4SZyP8AAABQGTH3fzzMRP4HAACAyoi5/xNhJjXJ//r/+v/6//r/pe3/tx1P/f+y9v//reul+v/6/93o/+v/9/P69f/1/+mtbP3/mPsfDTOpSf4HAACAOoi5/5NhJvI/AAAAVEbM/b8RZiL/AwAAQGXE3P+bYSb9mf8Hz3QH/X/9f/1//X/9f/3/laT/v7D/n7+GXcj+/6qlbKj/vyT6//r/+v/6/3RXtv5/zP2fCjPpz/wPAAAAdBBz/2+Fmcj/AAAAUBkx9/92mIn8DwAAAJURc/9jYSY1yf/6//r/+v/6//r/+v8rSf/f5/93o/+v/9/P69f/1/+nt7L1/2Pu/3SYSU3yPwAAANRBzP2/E2Yi/wMAAEBlxNy/J8xE/gcAAIDKiLn/8TCTmuR//X/9f/1//f/l6f/P6f/r/3ek/6//343+v/5/P69f/1//n97K1v+PuX9vmElN8j8AAADUQcz9nwkzkf8BAACgMmLu3xdmIv8DAABAZcTcvz/MpCb5X/9f/1//X//f5//r/68k/X/9/270//X/+3n9+v/6//RWtv5/zP1TYSY1yf8AAABQBzH3Hwgzkf8BAACgMmLuPxhmIv8DAABAZcTc/0SYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/n9ev/6//T2/L1///52Xp/8fcfyjMpCb5HwAAAOog5v7PhpnI/wAAAFAZMfd/LsxE/gcAAIDKiLn/cJhJTfK//r/+v/5/Bfv/w/r/mf5/aej/6/93o/+v/9/P69f/1/+nt+Xr/2fL0v+Puf9ImElN8j8AAADUQcz9R8NM5H8AAACojJj7j4WZyP8AAABQGTH3Hw8zqUn+1//X/9f/r2D/3+f/N+j/l4P+v/5/N/r/+v/9vH79f/1/eitb/z/m/t8NM6lJ/gcAAIA6iLn/RJiJ/A8AAACVEXP/dJiJ/A8AAACVEXP/TJhJTfK//r/+v/6//r/+v/7/StL/1//vRv+/f/r/Ix321//X//8/9u6jyY676uP41WPLksr1FCv2vAV27OAd+DWwYUuxIOeMAZNzzjnnaHLOOZick0FkMFSZsu45x5Y16h6N5+p2/8/ns/DxyGOpramS61dT32r9P3OW1v/n7r9v3NJk/wMAAEAHufvvF7fY/wAAADCM3P33j1vsfwAAABhG7v4HxC1N9r/+X/+v/19M/7/t/PT/+n/9/yXR/+v/N/vu/8/EB4P3/wfR/+v/9f/MWVr/n7v/gXFLk/0PAAAAHeTuf1DcYv8DAADAMHL3Pzhusf8BAABgGLn7HxK3NNn/+n/9/7j9/6m19f/e/59f1xH7/xO3/rL6/+Ol/9f/b/bd/zd5//9B9P/6f/0/c5bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/5f/z9u/7+69//r//PrOkT/f6Z+Hu//1//r/y9O/6//X/Pz6//1/8xbWv+fu/+RcUuT/Q8AAAAd5O5/VNxi/wMAAMAwcvc/Om6x/wEAAGAYufsfE7c02f/6f/2//l//r/+/DO//1//r//X/B9L/6//X/Pz6f/0/85bW/+fuf2zc0mT/AwAAQAe5+x8Xt9j/AAAAMIzc/Y+PW+x/AAAAGEbu/ifELU32v/5f/6//1//r//X/u6T/1/9P0f/r/9f8/Pp//T/zdt7/X3PtuXvY/j93/7VxS5P9DwAAAB3k7n9i3GL/AwAAwDBy9z8pbrH/AQAAYBi5+58ctzTZ/wf0/1ds9P9N+/+bT+j/9f/L7P9vij9l9P/6/wutu/8/rf/X/5/74eX1/4f7ndD/6//1/8zZef8/0/vf/uPc/dfFLU32PwAAAHSQu/8pcYv9DwAAAMPI3f/UuMX+BwAAgGHk7n9a3NJk/3v/v/7/ON//nz+v/n9L/+/9//p//b/3/0/bYf9/r/zN1P9f3L77+bU//1T/f/dDPL/+nw6W1v/n7n963NJk/wMAAEAHufufEbfY/wAAADCM3P3PjFvsfwAAABhG7v5nxS0N9v+V+v96jqT/9/7/Q/X/Z7b/vv7//OfR/+v/D6L/1/9P8f5//f+an9/7/+f7/6vnfhKGt7T+P3f/s+OWBvsfAAAAusjd/5y4xf4HAACAYeTuf27cYv8DAADAMHL3Py9uabL/9f/6f/2/9//fof7/Cv2//n+a/l//P0X/r/9f8/Pr/73/n3lL6/9z9z8/bqnhd+UR/isBAACAJcnd/4K4pcn3/wEAAKCD3P0vjFvsfwAAABhG7v4XxS1N9r/+X/+v/9f/e/+//n+X9P/D9f8n9P+30v/r//X/+n+mLa3/z93/4rilyf4HAACADnL3vyRusf8BAABgGLn7Xxq32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/6/93Sf8/XP/v/f+3of/X/+v/9f9MW1r/n7v/5XFLk/0PAAAAHeTuf0XcYv8DAADAMHL3vzJusf8BAABgGLn7XxW3NNn/+n/9v/5f/6//1//v0vL7/5OH+iz9/5b+/3y76v9PX+TX0/8v6/mPp//Pr77+nzEtoP+/x20/zt3/6rilyf4HAACADnL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/i/X/Z6/e/vOZ/j9/w/T/cfX/+v+N/r/o//X/m1X0/4ej/9/S/5/P+//1/97/r/9n2gL6//M+zt3/+rilyf4HAACADnL3vyFusf8BAABgGLn73xi32P8AAAAwjNz9b4pbmux/7//X/+v/9f/6f/3/Lun/9f9TVtT/nzroB/X/+n/9v/6faUvr/3P3vzluabL/AQAAoIPc/W+JW+x/AAAAGEbu/rfGLfY/AAAADCN3/9vilib7X/+v/997//9/+v+k/4+vq/5f/38J9P/6/433/x/Zvvv5tT+//l//z7yl9f+5+98etzTZ/wAAANBB7v53xC32PwAAAAwjd/874xb7HwAAAIaRu/9dcUuT/a//1//vvf/3/v+i/4+vq/5f/38J9P/6/43+/8j23c+v/fn1//p/5i2t/8/d/+64pcn+BwAAgA5y978nbrH/AQAAYBi5+98bt9j/AAAAMIzc/e+LW5rsf/2//l//r//X/+v/d0n/r/+fcnn7/+vO6v/Pt+9+fu3Pr//X/zNvaf1/7v73xy1N9j8AAAB0kLv/A3GL/Q8AAADDyN3/wbjF/gcAAIBh5O7/UNzSZP/r/9fe/9/zxniCpfX/+Sn6f/2//l//r//X/1/Uct//f/s/KQ6m/9f/6//1/0y7bP3/va+5z91u+ZuZ/j93/4fjlib7HwAAADrI3X993GL/AwAAwDBy938kbrH/AQAAYBi5+z8atzTZ/z36/5MXfNo4/b/3/+v/F93/5x+q+n/9v/5f/3+g5fb/h6P/1//r//X/TFva+/9z938sbmmy/wEAAKCD3P0fj1vsfwAAABhG7v5PxC32PwAAAAwjd/8n45Ym+79H/38h/f/Wsff/N99J/6//L97/r//f6P/1/zP0//r/NT//0P3/iY3+n2OxtP4/d/+n4pYm+x8AAAA6yN3/6bjF/gcAAIBh5O7/TNxi/wMAAMAwcvd/Nm646//v75EuK/2//t/7//X/+n/9/y7p/4/Q/5+48tDPpf/f0v8fzb77+bU//9D9v/f/c0yW1v/n7v9c3OL7/wAAADCM3P2fj1vsfwAAABhG7v4vxC32PwAAAAxg27vn7v9i3NJk/+v/9f/6f/2//l//v0v6f+//n6L/1/+v+fn1//p/5i2t/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBi5+78St9j/AAAAMIzc/V+NW5rsf/2//l//r//X/+v/d0n/r/+fov/X/6/5+fX/+n/mLa3/z93/tbilyf4HAACADnL3fz1usf8BAABgGLn7vxG32P8AAAAwjNz934xbmux//b/+X/+v/9f/773/P7nR/x+Z/l//v9H/H9m++/m1P7/+X//PvKX1/7n7vxW3NNn/AAAA0EHu/m/HLfY/AAAADCN3/3fiFvsfAAAAhpG7/7txS5P9P3L/P/Vp+v8t/b/+f6P/X0L/7/3/d4D+X/+/0f8f2b77+bU/v/5f/8+8pfX/ufu/F7c02f8AAADQQe7+78ct9j8AAAAMI3f/DZvN9fY/AAAAjOmGc389vflB3NJk/4/c/0/R/2/p//X/G/2//n/H9P/6/yn6f/3/mp9f/6//Z97S+v/c/T+MW5rsfwAAAOggd/+P4hb7HwAAAIaRu//HcYv9DwAAAMPI3f+TuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9P41bmux/AAAA6CB3/8/iFvsfAAAAhpG7/+dxi/0PAAAAw8jd/4u4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACGkbv/13GL/Q8AAADDyN3/m7ilyf7X/+v/9f/6f/2//n+X2vb/t/xvVf8/S/+v/1/z8+v/9f/MW1r/n7v/t3FLk/0PAAAAHeTu/13cYv8DAADAMHL3/z5usf8BAABgGLn7/xC3NNn/+n/9v/5f/7+O/v8q/b/+/0CL7f+9//9Q9P/6/zU/v/5f/8+8pfX/uftvjFua7H8AAADoIHf/H+MW+x8AAACGkbv/T3GL/Q8AAADDyN1/Nm5psv/1//r/Ifv/U/r/8fp/7/9fZf9/F/2//n+a/l//v+bn1//r/5m3tP4/d/+f45Ym+x8AAAA6yN3/l7jF/gcAAIBh5O7/a9xi/wMAAMAwcvf/LW5psv/1//r/Ift/7//X/+v/F0P/r/+fov/X/6/5+fX/+n/mLa3/z93/97ilyf4HAACADnL3/yNusf8BAABgGLn7/xm32P8AAAAwjNz9/4pbmux//b/+X/+v/9f/6/93Sf+/3v7/qo3+f47+X/+v/9f/M21p/X/u/n/HLU32PwAAAHSQu/+muOXA/X/ny/RUAAAAwHHK3f+fuMX3/wEAAGAYufv/G7c02f/6f/2//l//r//X/++S/n+9/b/3/8/T/+v/9f/6f6Ytrf/P3f+/AAAA///XHBWv") syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x0, 0x2, 0x18}) accept$unix(r3, &(0x7f0000000180), &(0x7f00000000c0)=0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45b, 0x700000000000000) 3.550002228s ago: executing program 2 (id=1272): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setpgid(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) 3.198493376s ago: executing program 4 (id=1273): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4002}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = open(0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 830.496826ms ago: executing program 1 (id=1274): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_CT={0x50, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x434}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x482}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001dc00)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x28}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x208000, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write(r0, &(0x7f0000000900)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26) 47.539726ms ago: executing program 4 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00'}) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001114100026bd7000fcdbdf25080003000300000008004f000400000008004f000000000008004b002800000008004b0000000000080003000400000008004a00008000000800010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @local, 0x680}, 0x1c) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000ea"], 0x40}}, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 0s ago: executing program 2 (id=1276): mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') kernel console output (not intermixed with test programs): red blocking state [ 556.770816][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.835927][T10803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.918879][ T5928] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 557.101238][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.153494][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.186003][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 557.260137][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 557.334274][ T9] usb 3-1: USB disconnect, device number 7 [ 557.334991][T10803] team0: Port device team_slave_0 added [ 557.367385][ T5928] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 557.401198][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.469782][T10803] team0: Port device team_slave_1 added [ 557.488665][ T5928] usb 2-1: Product: syz [ 557.492835][ T5928] usb 2-1: Manufacturer: syz [ 557.776590][ T5928] usb 2-1: SerialNumber: syz [ 558.201987][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.695'. [ 558.525024][ T5928] usb 2-1: config 0 descriptor?? [ 558.564294][T11110] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 558.875571][ T5928] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 559.098685][ T10] usb 2-1: USB disconnect, device number 14 [ 559.319271][T10803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.326226][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.435596][T10803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.476963][T10803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.488838][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.578683][T10803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.692898][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 559.867768][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 559.907286][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 559.950846][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.993006][ T9] usb 3-1: Product: syz [ 560.014643][ T9] usb 3-1: Manufacturer: syz [ 560.036436][ T9] usb 3-1: SerialNumber: syz [ 560.253832][ T9] usb 3-1: config 0 descriptor?? [ 560.271659][ T1150] bridge_slave_1: left allmulticast mode [ 560.277295][ T1150] bridge_slave_1: left promiscuous mode [ 560.295419][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.202227][ T1150] bridge_slave_0: left allmulticast mode [ 561.207901][ T1150] bridge_slave_0: left promiscuous mode [ 561.437769][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.429248][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 563.438054][T11283] netlink: 3 bytes leftover after parsing attributes in process `syz.1.702'. [ 563.662249][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.683831][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.692588][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.703635][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.715455][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.324964][T11291] block nbd4: shutting down sockets [ 564.491147][ T90] usb 3-1: USB disconnect, device number 8 [ 565.570483][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.706'. [ 565.859210][ T5883] Bluetooth: hci4: command tx timeout [ 567.919354][ T5883] Bluetooth: hci4: command tx timeout [ 568.685548][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.739962][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.770503][ T1150] bond0 (unregistering): Released all slaves [ 568.810487][ T1150] bond1 (unregistering): Released all slaves [ 569.005498][T10803] hsr_slave_0: entered promiscuous mode [ 569.133432][T10803] hsr_slave_1: entered promiscuous mode [ 569.225401][T10803] debugfs: 'hsr0' already exists in 'hsr' [ 569.251313][T11347] hub 9-0:1.0: USB hub found [ 569.258998][T11347] hub 9-0:1.0: 1 port detected [ 569.375490][T10803] Cannot create hsr debugfs directory [ 569.548641][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 570.190647][ T51] Bluetooth: hci4: command tx timeout [ 570.721397][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.881791][T11343] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 570.892283][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.536550][T11343] team0: Port device batadv4 added [ 571.552058][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 571.588663][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 571.611040][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 571.635423][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.671150][ T9] usb 2-1: Product: syz [ 571.675656][ T9] usb 2-1: Manufacturer: syz [ 571.950234][ T9] usb 2-1: SerialNumber: syz [ 572.094130][ T9] usb 2-1: config 0 descriptor?? [ 572.131447][T11354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 572.145851][ T9] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 572.198216][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.714'. [ 572.239137][ T51] Bluetooth: hci4: command tx timeout [ 572.403596][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.411800][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.486053][ T90] usb 2-1: USB disconnect, device number 15 [ 572.768252][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 572.859893][ T1150] hsr_slave_0: left promiscuous mode [ 573.248664][ T5928] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 573.525082][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.539379][ T1150] hsr_slave_1: left promiscuous mode [ 573.559267][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.300023][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.459238][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 574.470645][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.478434][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.498727][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.529221][ T5928] usb 3-1: Product: syz [ 574.533394][ T5928] usb 3-1: Manufacturer: syz [ 574.548237][ T5928] usb 3-1: SerialNumber: syz [ 574.573158][ T5928] usb 3-1: config 0 descriptor?? [ 574.784979][ T1150] veth1_macvtap: left promiscuous mode [ 575.154503][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.719'. [ 575.769402][ T1150] veth0_macvtap: left promiscuous mode [ 575.775636][ T1150] veth1_vlan: left promiscuous mode [ 575.782815][ T1150] veth0_vlan: left promiscuous mode [ 575.991381][ T5928] usb 3-1: USB disconnect, device number 9 [ 576.257589][ T1150] team0 (unregistering): Port device batadv1 removed [ 576.358320][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 576.384117][T11492] netlink: 3 bytes leftover after parsing attributes in process `syz.2.721'. [ 578.160428][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 578.216685][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 583.668870][ T90] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 584.298139][ T90] usb 6-1: unable to get BOS descriptor or descriptor too short [ 584.375170][ T90] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 584.402763][ T90] usb 6-1: can't read configurations, error -71 [ 584.729112][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 584.975369][T11289] chnl_net:caif_netlink_parms(): no params data found [ 585.040340][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 585.065722][ T1150] IPVS: stop unused estimator thread 0... [ 585.108733][ T5928] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 585.173881][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 585.384831][T10803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 585.436126][T10803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 585.668631][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 586.147638][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.732'. [ 586.490766][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.551417][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 586.571272][ T24] usb 2-1: Product: syz [ 586.575478][ T24] usb 2-1: Manufacturer: syz [ 586.588838][ T24] usb 2-1: SerialNumber: syz [ 586.613556][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.625389][ T24] usb 2-1: config 0 descriptor?? [ 586.649698][ T5928] usb 3-1: config 0 has no interfaces? [ 586.785442][ T5928] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 586.942681][T10803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 586.982906][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.020841][T10803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 587.084416][ T5928] usb 3-1: Product: syz [ 587.360686][ T5928] usb 3-1: Manufacturer: syz [ 587.365311][ T5928] usb 3-1: SerialNumber: syz [ 587.394196][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.604308][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.617130][T11289] bridge_slave_0: entered allmulticast mode [ 587.628889][T11289] bridge_slave_0: entered promiscuous mode [ 588.211572][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.225389][ T5928] usb 3-1: config 0 descriptor?? [ 588.304501][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.352264][T11289] bridge_slave_1: entered allmulticast mode [ 588.406473][T11289] bridge_slave_1: entered promiscuous mode [ 588.838074][ T5943] usb 2-1: USB disconnect, device number 16 [ 589.083684][T11798] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.734'. [ 590.284666][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.368242][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.878803][ T2148] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 591.626920][ T5928] usb 3-1: can't set config #0, error -71 [ 591.654928][ T5928] usb 3-1: USB disconnect, device number 10 [ 591.876014][ T2148] usb 5-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 592.050364][ T2148] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.221671][ T2148] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 592.315867][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.439364][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 592.448141][T11853] netlink: 3 bytes leftover after parsing attributes in process `syz.5.738'. [ 592.469301][ T2148] usb 5-1: Product: syz [ 592.473478][ T2148] usb 5-1: Manufacturer: syz [ 592.478068][ T2148] usb 5-1: SerialNumber: syz [ 592.513565][ T2148] usb 5-1: config 0 descriptor?? [ 592.685886][ T2148] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 592.921079][T11289] team0: Port device team_slave_0 added [ 592.930180][T11358] udevd[11358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.366963][T11289] team0: Port device team_slave_1 added [ 594.517632][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.568737][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.619162][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.684977][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.716168][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.770820][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.215875][T11289] hsr_slave_0: entered promiscuous mode [ 595.394647][ T5928] usb 5-1: USB disconnect, device number 14 [ 595.446556][T11289] hsr_slave_1: entered promiscuous mode [ 595.480146][T11289] debugfs: 'hsr0' already exists in 'hsr' [ 595.539201][T11289] Cannot create hsr debugfs directory [ 597.722954][ T2148] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 597.909021][ T2148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 597.949215][ T1150] bridge_slave_1: left allmulticast mode [ 597.955327][ T1150] bridge_slave_1: left promiscuous mode [ 597.962485][ T2148] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 597.998253][ T2148] usb 3-1: can't read configurations, error -71 [ 598.008812][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.122817][ T1150] bridge_slave_0: left allmulticast mode [ 598.128478][ T1150] bridge_slave_0: left promiscuous mode [ 598.188867][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.310162][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 600.054771][T12015] hub 9-0:1.0: USB hub found [ 600.061793][T12015] hub 9-0:1.0: 1 port detected [ 602.021140][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 602.176057][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 602.189912][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 602.203405][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 602.215681][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 602.222779][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 602.248905][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 602.278516][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.536361][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.584587][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.595948][ T9] usb 3-1: config 0 has no interfaces? [ 602.602292][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.299513][ T1150] bond0 (unregistering): Released all slaves [ 603.452684][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 603.461763][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.469769][ T9] usb 3-1: Product: syz [ 603.473908][ T9] usb 3-1: Manufacturer: syz [ 603.478483][ T9] usb 3-1: SerialNumber: syz [ 603.498667][ T9] usb 3-1: config 0 descriptor?? [ 603.752528][T12014] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 603.833062][T12014] team0: Port device batadv5 added [ 604.319052][ T5883] Bluetooth: hci1: command tx timeout [ 604.325389][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 604.697371][ T1150] hsr_slave_0: left promiscuous mode [ 604.865807][ T1150] hsr_slave_1: left promiscuous mode [ 604.948707][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.997899][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.725406][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 606.786299][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 606.987970][ T51] Bluetooth: hci1: command tx timeout [ 608.080204][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 608.088891][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 608.420268][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 609.384115][ T5883] Bluetooth: hci1: command tx timeout [ 610.622786][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 610.712314][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.741027][ T5943] usb 3-1: USB disconnect, device number 13 [ 610.799560][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 610.829008][ T24] usb 5-1: can't read configurations, error -71 [ 611.502842][ T5883] Bluetooth: hci1: command tx timeout [ 612.931670][T12196] overlayfs: failed to resolve './file0': -2 [ 613.617071][T12197] fuse: Unknown parameter 'f¦Jù' [ 613.764177][T12197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.840877][T12202] block nbd1: shutting down sockets [ 614.021940][T12213] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.764'. [ 618.499276][T12041] chnl_net:caif_netlink_parms(): no params data found [ 618.942637][T11289] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 621.338695][ T9853] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 621.501207][T12041] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.545188][ T9853] usb 2-1: Using ep0 maxpacket: 16 [ 621.554963][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.679034][ T9853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 621.699778][T12041] bridge_slave_0: entered allmulticast mode [ 621.792448][ T9853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.820777][T12041] bridge_slave_0: entered promiscuous mode [ 621.907940][ T9853] usb 2-1: config 0 has no interfaces? [ 621.914274][T12041] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.934963][T12041] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.942881][ T9853] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 621.961289][T12041] bridge_slave_1: entered allmulticast mode [ 621.985670][ T9853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.996102][T12041] bridge_slave_1: entered promiscuous mode [ 622.008046][ T9853] usb 2-1: Product: syz [ 622.120006][ T9853] usb 2-1: Manufacturer: syz [ 622.152927][ T9853] usb 2-1: SerialNumber: syz [ 622.295878][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 622.304812][T12438] netlink: 3 bytes leftover after parsing attributes in process `syz.5.774'. [ 622.496488][ T9853] usb 2-1: config 0 descriptor?? [ 622.536164][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.545133][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 622.553315][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 622.563135][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 622.571105][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 623.322022][T12041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.460112][T12041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.587913][ T12] bridge_slave_1: left allmulticast mode [ 623.661472][ T12] bridge_slave_1: left promiscuous mode [ 623.722131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.751232][ T12] bridge_slave_0: left allmulticast mode [ 623.760705][ T12] bridge_slave_0: left promiscuous mode [ 623.770343][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.394282][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.643938][ T51] Bluetooth: hci4: command tx timeout [ 624.921917][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.975607][ T12] bond0 (unregistering): Released all slaves [ 625.837950][T12041] team0: Port device team_slave_0 added [ 625.969146][ T5943] usb 2-1: USB disconnect, device number 17 [ 626.154723][ T12] hsr_slave_0: left promiscuous mode [ 626.313800][ T12] hsr_slave_1: left promiscuous mode [ 626.341478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.373648][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.848379][ T51] Bluetooth: hci4: command tx timeout [ 627.662939][ T12] team0 (unregistering): Port device team_slave_1 removed [ 627.805572][ T12] team0 (unregistering): Port device team_slave_0 removed [ 628.028472][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 628.037497][T12524] netlink: 3 bytes leftover after parsing attributes in process `syz.5.781'. [ 628.879499][ T51] Bluetooth: hci4: command tx timeout [ 629.025396][T12041] team0: Port device team_slave_1 added [ 629.193292][T12041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.218812][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.348642][T12041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.707403][T12041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.757362][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.916035][T12041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.082260][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 630.091646][T12578] netlink: 3 bytes leftover after parsing attributes in process `syz.4.785'. [ 630.626393][T12041] hsr_slave_0: entered promiscuous mode [ 630.664334][T12041] hsr_slave_1: entered promiscuous mode [ 630.670835][T12041] debugfs: 'hsr0' already exists in 'hsr' [ 630.676615][T12041] Cannot create hsr debugfs directory [ 630.982312][ T51] Bluetooth: hci4: command tx timeout [ 633.212946][T12437] chnl_net:caif_netlink_parms(): no params data found [ 633.268671][ T5943] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 633.478700][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 633.525964][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 633.577599][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.595676][ T5943] usb 2-1: config 0 has no interfaces? [ 633.644876][ T5943] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 633.655024][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.679707][ T5943] usb 2-1: Product: syz [ 633.691509][ T5943] usb 2-1: Manufacturer: syz [ 633.787292][ T5943] usb 2-1: SerialNumber: syz [ 633.857174][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.863609][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.922218][ T5943] usb 2-1: config 0 descriptor?? [ 636.684909][T12849] fuse: Unknown parameter 'f¦Jù' [ 636.713318][T12849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.808744][ T9853] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 636.825502][T12862] block nbd4: shutting down sockets [ 637.515751][ T9853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 637.549367][T12437] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.576064][T12437] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.612797][T12437] bridge_slave_0: entered allmulticast mode [ 637.639564][ T9853] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 637.661628][ T9853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.680683][T12437] bridge_slave_0: entered promiscuous mode [ 637.706768][ T9853] usb 6-1: Product: syz [ 637.720992][ T9853] usb 6-1: Manufacturer: syz [ 637.745861][ T9853] usb 6-1: SerialNumber: syz [ 637.820546][ T9853] usb 6-1: config 0 descriptor?? [ 637.949601][T12437] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.956820][T12437] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.999478][T12437] bridge_slave_1: entered allmulticast mode [ 638.021470][T12437] bridge_slave_1: entered promiscuous mode [ 638.641359][T12916] binder: 12837:12916 ioctl c0306201 0 returned -14 [ 638.790436][T12437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.826009][ T5943] usb 2-1: USB disconnect, device number 18 [ 638.957397][T12437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.284917][T12437] team0: Port device team_slave_0 added [ 639.318256][ T37] bridge_slave_1: left allmulticast mode [ 639.384292][ T37] bridge_slave_1: left promiscuous mode [ 639.419121][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.490332][ T37] bridge_slave_0: left allmulticast mode [ 639.551306][ T37] bridge_slave_0: left promiscuous mode [ 639.761953][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.882302][ T5943] usb 6-1: USB disconnect, device number 27 [ 640.543976][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.583209][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.619445][ T37] bond0 (unregistering): Released all slaves [ 640.720640][T12437] team0: Port device team_slave_1 added [ 640.902919][ T5943] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 641.009077][T12437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.026198][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.065935][T12437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.080377][T12041] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 641.095994][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.122222][ T5943] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.230435][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.282904][ T5943] usb 2-1: Product: syz [ 641.299013][ T5943] usb 2-1: Manufacturer: syz [ 641.307575][ T5943] usb 2-1: SerialNumber: syz [ 641.329671][ T5943] usb 2-1: config 0 descriptor?? [ 641.357311][ T37] hsr_slave_0: left promiscuous mode [ 641.390038][ T37] hsr_slave_1: left promiscuous mode [ 641.409871][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.425784][ T5943] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 641.499020][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.622792][T11358] udevd[11358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.668317][ T37] team0 (unregistering): Port device team_slave_1 removed [ 645.810661][ T9] usb 2-1: USB disconnect, device number 19 [ 645.881572][ T37] team0 (unregistering): Port device team_slave_0 removed [ 647.789182][T12437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.798127][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.898427][T12437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.984739][T12041] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 649.047106][T12041] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 649.412372][T12041] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 650.180103][T12437] hsr_slave_0: entered promiscuous mode [ 650.221664][T12437] hsr_slave_1: entered promiscuous mode [ 650.364843][T12437] debugfs: 'hsr0' already exists in 'hsr' [ 650.388581][T12437] Cannot create hsr debugfs directory [ 653.995303][T12041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.999080][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 654.211034][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.357944][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 654.376062][T12041] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.385339][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.434058][ T9] usb 2-1: Product: syz [ 654.445037][ T9] usb 2-1: Manufacturer: syz [ 654.457735][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.464866][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.492930][ T9] usb 2-1: SerialNumber: syz [ 654.521043][ T9] usb 2-1: config 0 descriptor?? [ 654.561935][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.569085][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.655404][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 654.921947][T13225] udevd[13225]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.369038][T12437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 656.425593][T12437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 656.484170][T12437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 656.526767][T12437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 656.933463][T12437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.195958][T12437] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.268458][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.275613][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.330043][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.337217][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.418614][ T9853] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 657.427539][T13297] block nbd2: shutting down sockets [ 657.476286][ T2148] usb 2-1: USB disconnect, device number 20 [ 657.605321][ T9853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 657.826480][T12041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.833623][ T9853] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 658.070598][ T9853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.489429][ T9853] usb 6-1: Product: syz [ 658.526627][ T9853] usb 6-1: Manufacturer: syz [ 658.648415][ T9853] usb 6-1: SerialNumber: syz [ 658.671279][ T9853] usb 6-1: config 0 descriptor?? [ 659.444406][T13334] binder: 13287:13334 ioctl c0306201 0 returned -14 [ 660.007109][ T9853] usb 6-1: USB disconnect, device number 28 [ 661.183991][T12437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.417838][ T5883] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 662.439884][ T5883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 662.519353][ T5883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 662.528177][ T5883] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 662.536083][ T5883] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 664.718909][ T5883] Bluetooth: hci6: command tx timeout [ 666.799783][ T5883] Bluetooth: hci6: command tx timeout [ 668.348604][ T9853] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 668.762245][ T9853] usb 3-1: unable to get BOS descriptor or descriptor too short [ 668.799421][ T9853] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.822802][ T9853] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 668.841220][T13456] fuse: Unknown parameter 'f¦Jù' [ 668.864338][ T9853] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 668.889306][ T9853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.914438][ T9853] usb 3-1: Product: syz [ 668.926092][ T9853] usb 3-1: Manufacturer: syz [ 668.942248][ T9853] usb 3-1: SerialNumber: syz [ 668.958482][T13456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.039878][ T5883] Bluetooth: hci6: command tx timeout [ 669.224206][ T9853] usb 3-1: config 0 descriptor?? [ 669.555423][ T5943] usb 3-1: USB disconnect, device number 14 [ 669.710279][T12437] veth0_vlan: entered promiscuous mode [ 669.816047][T12437] veth1_vlan: entered promiscuous mode [ 669.878242][T13374] chnl_net:caif_netlink_parms(): no params data found [ 671.119908][ T5883] Bluetooth: hci6: command tx timeout [ 671.195919][T13374] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.238764][T13374] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.250977][T13374] bridge_slave_0: entered allmulticast mode [ 671.260346][T13374] bridge_slave_0: entered promiscuous mode [ 671.379705][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.788812][T13374] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.808857][T13374] bridge_slave_1: entered allmulticast mode [ 671.854724][T13374] bridge_slave_1: entered promiscuous mode [ 672.058036][T12437] veth0_macvtap: entered promiscuous mode [ 672.082032][ T198] bridge_slave_1: left allmulticast mode [ 672.129736][ T198] bridge_slave_1: left promiscuous mode [ 672.162248][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.410012][ T198] bridge_slave_0: left allmulticast mode [ 673.415684][ T198] bridge_slave_0: left promiscuous mode [ 673.425158][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.141029][T13675] hub 9-0:1.0: USB hub found [ 676.147118][T13675] hub 9-0:1.0: 1 port detected [ 677.018926][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.069183][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.109782][ T198] bond0 (unregistering): Released all slaves [ 677.320423][T13374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.451045][T13673] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 677.480558][T13673] team0: Port device batadv2 added [ 678.508835][ T198] hsr_slave_0: left promiscuous mode [ 678.668682][ T198] hsr_slave_1: left promiscuous mode [ 678.674775][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.029031][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.936384][T13729] loop5: detected capacity change from 0 to 1024 [ 683.124596][T13741] overlayfs: failed to resolve './file0': -2 [ 683.638731][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.667146][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.675779][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.697695][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.709243][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.712868][ T198] team0 (unregistering): Port device team_slave_1 removed [ 685.911204][ T198] team0 (unregistering): Port device team_slave_0 removed [ 686.193688][T13766] netlink: 20 bytes leftover after parsing attributes in process `syz.5.858'. [ 686.861677][T13374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.959606][ T51] Bluetooth: hci1: command tx timeout [ 688.224252][T13374] team0: Port device team_slave_0 added [ 688.251971][T13374] team0: Port device team_slave_1 added [ 688.570057][T13816] loop5: detected capacity change from 0 to 1024 [ 689.048891][ T51] Bluetooth: hci1: command tx timeout [ 690.281822][T13374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.342185][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.478600][T13374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.110783][T13374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.117804][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.155080][ T51] Bluetooth: hci1: command tx timeout [ 691.245699][T13374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.343785][T13859] block nbd2: shutting down sockets [ 692.201565][T13893] loop4: detected capacity change from 0 to 1024 [ 692.896014][T13935] overlayfs: failed to resolve './file0': -2 [ 693.209547][ T51] Bluetooth: hci1: command tx timeout [ 693.854194][T13374] hsr_slave_0: entered promiscuous mode [ 693.909955][T13374] hsr_slave_1: entered promiscuous mode [ 693.941880][T13374] debugfs: 'hsr0' already exists in 'hsr' [ 693.953573][T13374] Cannot create hsr debugfs directory [ 693.993455][ T5928] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 694.188628][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 694.409163][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.437986][ T5928] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 694.450030][ T5928] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 694.459384][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.467439][ T5928] usb 5-1: Product: syz [ 695.178692][ T5928] usb 5-1: Manufacturer: syz [ 695.189452][ T5928] usb 5-1: SerialNumber: syz [ 695.219938][ T5928] usb 5-1: config 0 descriptor?? [ 695.287171][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.294618][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.876586][ T5943] usb 5-1: USB disconnect, device number 17 [ 697.467230][T13744] chnl_net:caif_netlink_parms(): no params data found [ 698.558854][ T5943] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 698.584354][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 698.755188][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 698.878032][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 698.888096][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 698.905829][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 698.965833][ T5943] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 699.079148][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.103080][ T5943] usb 6-1: Product: syz [ 699.127758][ T5943] usb 6-1: Manufacturer: syz [ 699.156701][ T5943] usb 6-1: SerialNumber: syz [ 699.259831][ T5943] usb 6-1: config 0 descriptor?? [ 699.687961][T14193] overlayfs: failed to resolve './file0': -2 [ 702.064695][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.104176][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.159104][T13744] bridge_slave_0: entered allmulticast mode [ 702.235156][T13744] bridge_slave_0: entered promiscuous mode [ 702.363681][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.384861][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.459938][T13744] bridge_slave_1: entered allmulticast mode [ 702.506045][T13744] bridge_slave_1: entered promiscuous mode [ 702.689352][ T5928] usb 6-1: USB disconnect, device number 29 [ 702.969154][T14283] loop1: detected capacity change from 0 to 512 [ 703.539827][T14283] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.885: casefold flag without casefold feature [ 703.627365][T14283] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.885: couldn't read orphan inode 15 (err -117) [ 703.674753][T14283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.963618][T13744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.191031][T13744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.696595][T14358] loop4: detected capacity change from 0 to 1024 [ 706.782516][T13744] team0: Port device team_slave_0 added [ 706.801911][T13744] team0: Port device team_slave_1 added [ 706.866884][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.877042][ T198] bridge_slave_1: left allmulticast mode [ 706.899180][ T198] bridge_slave_1: left promiscuous mode [ 706.904927][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.220103][ T198] bridge_slave_0: left allmulticast mode [ 707.225768][ T198] bridge_slave_0: left promiscuous mode [ 707.270220][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.234068][T14394] hub 9-0:1.0: USB hub found [ 708.252093][T14394] hub 9-0:1.0: 1 port detected [ 709.546132][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.643363][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.687462][ T198] bond0 (unregistering): Released all slaves [ 710.169419][T14375] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 710.224071][T14375] team0: Port device batadv6 added [ 710.461303][ T198] hsr_slave_0: left promiscuous mode [ 710.551003][ T198] hsr_slave_1: left promiscuous mode [ 710.581865][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.710254][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.396770][ T198] veth0_macvtap: left promiscuous mode [ 711.514726][ T198] veth1_vlan: left promiscuous mode [ 711.568846][ T198] veth0_vlan: left promiscuous mode [ 715.291994][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 719.383458][ T198] team0 (unregistering): Port device team_slave_1 removed [ 719.677801][ T198] team0 (unregistering): Port device team_slave_0 removed [ 722.928150][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 722.963186][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.008130][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.124151][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.144886][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.838333][T13744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.887760][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.960519][T13744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.133609][T13744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.366723][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.393270][T13744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.408894][ T5883] Bluetooth: hci4: command tx timeout [ 726.415549][T14581] loop2: detected capacity change from 0 to 512 [ 726.769684][T14581] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.915: casefold flag without casefold feature [ 726.789905][T14581] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.915: couldn't read orphan inode 15 (err -117) [ 726.847876][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 727.519511][ T5883] Bluetooth: hci4: command tx timeout [ 727.592157][T14581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.851675][T13744] hsr_slave_0: entered promiscuous mode [ 727.858341][T13744] hsr_slave_1: entered promiscuous mode [ 727.941530][T13744] debugfs: 'hsr0' already exists in 'hsr' [ 727.960589][T13744] Cannot create hsr debugfs directory [ 727.985619][ T2148] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 728.175177][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 728.410083][ T2148] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 728.536285][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.634651][ T2148] usb 5-1: Product: syz [ 728.704384][ T2148] usb 5-1: Manufacturer: syz [ 728.754804][ T2148] usb 5-1: SerialNumber: syz [ 728.890664][ T2148] usb 5-1: config 0 descriptor?? [ 729.493714][T14704] loop5: detected capacity change from 0 to 1024 [ 729.610756][ T5883] Bluetooth: hci4: command tx timeout [ 731.115808][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.663625][ T9853] usb 5-1: USB disconnect, device number 18 [ 731.679003][ T5883] Bluetooth: hci4: command tx timeout [ 731.688186][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 735.594340][T14810] block nbd4: shutting down sockets [ 736.905829][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 736.979652][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 737.045256][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 737.387928][T14907] loop1: detected capacity change from 0 to 1024 [ 737.395350][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 738.338074][T14554] chnl_net:caif_netlink_parms(): no params data found [ 739.690641][ T59] bridge_slave_1: left allmulticast mode [ 739.727924][ T59] bridge_slave_1: left promiscuous mode [ 739.787496][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.847904][ T59] bridge_slave_0: left allmulticast mode [ 739.869112][ T59] bridge_slave_0: left promiscuous mode [ 739.880956][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.301437][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.344999][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.386123][ T59] bond0 (unregistering): Released all slaves [ 740.402081][ T5928] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 740.521363][T13744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 740.555513][T14554] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.570905][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 740.602541][ T5928] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 740.634870][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.635836][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.683727][T14554] bridge_slave_0: entered allmulticast mode [ 740.695532][ T5928] usb 6-1: Product: syz [ 740.708040][T14554] bridge_slave_0: entered promiscuous mode [ 740.714715][ T5928] usb 6-1: Manufacturer: syz [ 740.714747][ T5928] usb 6-1: SerialNumber: syz [ 740.921815][ T5928] usb 6-1: config 0 descriptor?? [ 740.954029][T14554] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.970870][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.973621][T14554] bridge_slave_1: entered allmulticast mode [ 743.005739][T14554] bridge_slave_1: entered promiscuous mode [ 743.018837][T13744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 743.144087][ T59] hsr_slave_0: left promiscuous mode [ 743.246159][ T59] hsr_slave_1: left promiscuous mode [ 743.267255][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.487287][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.922951][T15056] loop2: detected capacity change from 0 to 1024 [ 745.939371][ T9] usb 6-1: USB disconnect, device number 30 [ 746.654837][T15086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.941'. [ 747.059190][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 747.078454][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 747.098971][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 747.110155][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.940'. [ 747.161216][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 747.171254][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.068251][T15115] loop1: detected capacity change from 0 to 1024 [ 748.894960][ T59] team0 (unregistering): Port device team_slave_1 removed [ 749.249145][ T59] team0 (unregistering): Port device team_slave_0 removed [ 749.288756][ T51] Bluetooth: hci1: command tx timeout [ 749.523437][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 749.534409][T15132] netlink: 3 bytes leftover after parsing attributes in process `syz.2.946'. [ 751.359558][ T51] Bluetooth: hci1: command tx timeout [ 751.717491][T14554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.789594][T14554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.242236][T14554] team0: Port device team_slave_0 added [ 753.283249][T14554] team0: Port device team_slave_1 added [ 753.445253][ T51] Bluetooth: hci1: command tx timeout [ 755.518685][ T51] Bluetooth: hci1: command tx timeout [ 756.359464][T14554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.366513][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.404684][T14554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.746048][ T90] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 756.759226][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.765643][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.237227][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 757.653894][ T90] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.675259][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.806540][T14554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.834530][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.842997][ T90] usb 3-1: Product: syz [ 757.860918][T14554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.910798][ T90] usb 3-1: Manufacturer: syz [ 757.915400][ T90] usb 3-1: SerialNumber: syz [ 757.996230][ T90] usb 3-1: config 0 descriptor?? [ 758.076049][T15280] block nbd5: shutting down sockets [ 758.294033][T14554] hsr_slave_0: entered promiscuous mode [ 758.377619][T14554] hsr_slave_1: entered promiscuous mode [ 758.395187][T14554] debugfs: 'hsr0' already exists in 'hsr' [ 758.423524][T14554] Cannot create hsr debugfs directory [ 758.442334][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 760.991666][ T9] usb 3-1: USB disconnect, device number 15 [ 761.785232][T15406] befs: (nullb0): No write support. Marking filesystem read-only [ 761.810844][T15406] befs: (nullb0): invalid magic header [ 761.857726][T15401] loop1: detected capacity change from 0 to 1024 [ 765.046859][T15496] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 765.071760][T15496] team0: Port device batadv3 added [ 765.306084][T15471] hub 9-0:1.0: USB hub found [ 765.321613][T15471] hub 9-0:1.0: 1 port detected [ 766.047030][T15102] chnl_net:caif_netlink_parms(): no params data found [ 766.273250][ T59] bridge_slave_1: left allmulticast mode [ 766.298732][ T59] bridge_slave_1: left promiscuous mode [ 766.305723][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.419767][ T59] bridge_slave_0: left allmulticast mode [ 766.425413][ T59] bridge_slave_0: left promiscuous mode [ 766.469419][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.957853][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.993635][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.067403][ T59] bond0 (unregistering): Released all slaves [ 767.345949][ T59] hsr_slave_0: left promiscuous mode [ 767.383587][ T59] hsr_slave_1: left promiscuous mode [ 767.405479][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.449727][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.183730][ T59] team0 (unregistering): Port device team_slave_1 removed [ 769.387544][ T59] team0 (unregistering): Port device team_slave_0 removed [ 770.276220][ T90] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 770.636129][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 770.654473][T15620] loop2: detected capacity change from 0 to 1024 [ 770.674383][ T90] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 770.688559][ T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.696550][ T90] usb 5-1: Product: syz [ 770.738543][ T90] usb 5-1: Manufacturer: syz [ 770.747499][ T90] usb 5-1: SerialNumber: syz [ 771.170158][ T90] usb 5-1: config 0 descriptor?? [ 771.540441][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'. [ 773.183188][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 773.561059][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.590705][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.663493][T15102] bridge_slave_0: entered allmulticast mode [ 773.694371][T15102] bridge_slave_0: entered promiscuous mode [ 773.720288][T15102] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.751753][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.920614][ T2148] usb 5-1: USB disconnect, device number 19 [ 774.570299][T15102] bridge_slave_1: entered allmulticast mode [ 774.597202][T15102] bridge_slave_1: entered promiscuous mode [ 776.203879][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.309352][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.796109][T15102] team0: Port device team_slave_0 added [ 777.804920][T15102] team0: Port device team_slave_1 added [ 777.861810][T14554] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 778.366017][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.389159][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.642333][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.661356][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.669134][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.698614][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.736762][T14554] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 778.789949][T14554] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 779.160121][T14554] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 779.354256][T15102] hsr_slave_0: entered promiscuous mode [ 779.387198][T15102] hsr_slave_1: entered promiscuous mode [ 779.415240][T15102] debugfs: 'hsr0' already exists in 'hsr' [ 779.467792][T15102] Cannot create hsr debugfs directory [ 779.689221][T14554] kthread_run failed with err -4 [ 782.933339][T15944] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 783.001248][T15944] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 783.058593][T15944] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 784.808056][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 784.817081][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 784.826410][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 784.834899][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 784.843341][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.738789][ T5928] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 785.948988][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 786.012347][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.054466][ T5928] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 786.130998][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.109681][ T5883] Bluetooth: hci4: command tx timeout [ 788.462257][ T5928] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 788.538584][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.546602][ T5928] usb 3-1: Product: syz [ 788.596233][ T5928] usb 3-1: Manufacturer: syz [ 788.658028][ T5928] usb 3-1: config 0 descriptor?? [ 788.682963][ T5928] usb 3-1: can't set config #0, error -71 [ 788.708191][ T5928] usb 3-1: USB disconnect, device number 16 [ 789.210591][ T5883] Bluetooth: hci4: command tx timeout [ 790.490700][T16076] hub 9-0:1.0: USB hub found [ 790.528300][T16076] hub 9-0:1.0: 1 port detected [ 790.797531][T16060] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 790.812282][T16060] team0: Port device batadv3 added [ 791.118870][ T2148] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 791.280694][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 791.281895][ T5883] Bluetooth: hci4: command tx timeout [ 791.301862][ T2148] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 791.345613][ T2148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.352829][T15102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 791.422138][ T2148] usb 3-1: Product: syz [ 791.426318][ T2148] usb 3-1: Manufacturer: syz [ 791.453678][T15102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 791.478558][ T2148] usb 3-1: SerialNumber: syz [ 791.499919][T15102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 791.571979][ T2148] usb 3-1: config 0 descriptor?? [ 791.693259][T15102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 792.645101][ T59] bridge_slave_1: left allmulticast mode [ 792.651529][ T59] bridge_slave_1: left promiscuous mode [ 792.657289][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.358850][ T5883] Bluetooth: hci4: command tx timeout [ 794.231939][ T59] bridge_slave_0: left allmulticast mode [ 794.237674][ T59] bridge_slave_0: left promiscuous mode [ 794.278863][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.089472][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.161418][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.207101][ T59] bond0 (unregistering): Released all slaves [ 795.335359][T15991] chnl_net:caif_netlink_parms(): no params data found [ 795.769245][ T59] hsr_slave_0: left promiscuous mode [ 795.799461][ T59] hsr_slave_1: left promiscuous mode [ 797.011011][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.512126][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.121376][ T90] usb 3-1: USB disconnect, device number 17 [ 801.231868][ T59] team0 (unregistering): Port device team_slave_1 removed [ 801.329222][ T59] team0 (unregistering): Port device team_slave_0 removed [ 801.767856][T16318] hub 9-0:1.0: USB hub found [ 801.773663][T16318] hub 9-0:1.0: 1 port detected [ 803.019757][T16316] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 803.062167][T16316] team0: Port device batadv4 added [ 803.086145][T16312] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 803.144929][T16312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 803.168626][T16312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 804.599482][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.606613][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.662177][T15991] bridge_slave_0: entered allmulticast mode [ 804.690316][T15991] bridge_slave_0: entered promiscuous mode [ 804.731095][T15991] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.738230][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.789256][T15991] bridge_slave_1: entered allmulticast mode [ 804.808529][T15991] bridge_slave_1: entered promiscuous mode [ 804.931891][T15991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.963240][T15991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.067527][T15991] team0: Port device team_slave_0 added [ 806.307795][T15991] team0: Port device team_slave_1 added [ 806.716319][T16427] befs: (nullb0): No write support. Marking filesystem read-only [ 806.724438][T16427] befs: (nullb0): invalid magic header [ 806.922340][T16431] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1024'. [ 807.723623][T15991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.764711][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.834660][T15991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.860921][T16481] loop2: detected capacity change from 0 to 1024 [ 807.882621][T15991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.888674][ T5956] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 807.935338][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.484150][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 808.521366][T15991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.532193][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.559863][ T5956] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 808.571400][ T5956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.592392][ T5956] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 808.608907][T16492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.619060][T16492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.626901][T16492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.636042][T16492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.644287][T16492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.659603][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.681333][ T5956] usb 5-1: Product: syz [ 808.688313][ T5956] usb 5-1: Manufacturer: syz [ 808.698424][ T5956] usb 5-1: SerialNumber: syz [ 808.713147][ T5956] usb 5-1: config 0 descriptor?? [ 808.719149][T16465] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 808.728388][ T5956] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 808.778348][T16499] overlayfs: failed to resolve './file0': -2 [ 809.481121][ T90] usb 5-1: USB disconnect, device number 20 [ 809.670898][T16536] loop1: detected capacity change from 0 to 1024 [ 810.496472][T16553] befs: (nullb0): No write support. Marking filesystem read-only [ 810.505458][T16553] befs: (nullb0): invalid magic header [ 810.721706][T16492] Bluetooth: hci1: command tx timeout [ 810.913012][T16538] hub 9-0:1.0: USB hub found [ 810.918639][T16538] hub 9-0:1.0: 1 port detected [ 811.423147][T16531] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 811.470315][T16531] team0: Port device batadv7 added [ 811.722773][T15991] hsr_slave_0: entered promiscuous mode [ 812.085015][T15991] hsr_slave_1: entered promiscuous mode [ 812.099008][T15991] debugfs: 'hsr0' already exists in 'hsr' [ 812.110533][T15991] Cannot create hsr debugfs directory [ 812.805305][T16492] Bluetooth: hci1: command tx timeout [ 814.596232][ T59] bridge_slave_1: left allmulticast mode [ 814.623683][ T59] bridge_slave_1: left promiscuous mode [ 814.658933][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.725945][ T59] bridge_slave_0: left allmulticast mode [ 814.743516][ T59] bridge_slave_0: left promiscuous mode [ 814.799019][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.878979][T16492] Bluetooth: hci1: command tx timeout [ 815.931518][T16710] overlayfs: failed to resolve './file0': -2 [ 815.952982][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.114467][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.151953][ T59] bond0 (unregistering): Released all slaves [ 816.456262][ T59] hsr_slave_0: left promiscuous mode [ 816.478916][ T59] hsr_slave_1: left promiscuous mode [ 816.485042][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.519297][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.568781][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1046'. [ 816.638730][T16727] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1046'. [ 816.958789][T16492] Bluetooth: hci1: command tx timeout [ 817.272181][ T59] team0 (unregistering): Port device team_slave_1 removed [ 817.667933][ T59] team0 (unregistering): Port device team_slave_0 removed [ 818.164009][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.170950][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.353465][ T5956] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 818.357622][T16742] loop2: detected capacity change from 0 to 1024 [ 818.531781][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 818.550895][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.572220][ T5956] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 818.588833][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.668956][ T5956] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 818.879923][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.889095][ T5956] usb 2-1: Product: syz [ 818.893338][ T5956] usb 2-1: Manufacturer: syz [ 818.905052][ T5956] usb 2-1: SerialNumber: syz [ 818.912976][ T5956] usb 2-1: config 0 descriptor?? [ 818.918903][T16737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 818.937630][ T5956] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 819.826468][ T5956] usb 2-1: USB disconnect, device number 21 [ 820.212309][T16835] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1050'. [ 820.924355][T16487] chnl_net:caif_netlink_parms(): no params data found [ 821.320620][T15991] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 822.201761][T15991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 822.779835][T15991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 822.806935][T15991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 822.937292][T16908] overlayfs: failed to resolve './file0': -2 [ 823.022144][T16487] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.037248][T16487] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.070196][T16487] bridge_slave_0: entered allmulticast mode [ 823.106819][T16487] bridge_slave_0: entered promiscuous mode [ 823.282201][T16487] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.298600][T16487] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.305776][T16487] bridge_slave_1: entered allmulticast mode [ 823.352605][T16487] bridge_slave_1: entered promiscuous mode [ 823.714682][T16487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.823726][T16487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.054333][T16487] team0: Port device team_slave_0 added [ 824.087455][T16487] team0: Port device team_slave_1 added [ 824.623783][T16487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.679326][T16487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.756171][T16487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.136261][T16487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.158504][T16487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.466719][T16487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.455459][ T5956] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 827.493086][T16487] hsr_slave_0: entered promiscuous mode [ 827.499563][T16487] hsr_slave_1: entered promiscuous mode [ 827.682772][T16487] debugfs: 'hsr0' already exists in 'hsr' [ 827.708661][ T5956] usb 6-1: unable to get BOS descriptor or descriptor too short [ 827.717619][T16487] Cannot create hsr debugfs directory [ 827.724752][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.178007][ T5956] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 828.238554][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.284968][ T5956] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 828.315622][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.357183][ T5956] usb 6-1: Product: syz [ 828.385716][ T5956] usb 6-1: Manufacturer: syz [ 828.409200][ T5956] usb 6-1: SerialNumber: syz [ 828.447768][ T5956] usb 6-1: config 0 descriptor?? [ 828.485669][T17067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 828.516818][ T5956] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 828.550578][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.723398][T15991] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.762926][ T90] usb 6-1: USB disconnect, device number 31 [ 829.067285][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.074429][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.260790][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.268294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.533353][T17177] loop1: detected capacity change from 0 to 1024 [ 832.135127][T17214] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 832.198167][T17236] hub 9-0:1.0: USB hub found [ 832.204421][T17214] team0: Port device batadv8 added [ 832.230486][T17236] hub 9-0:1.0: 1 port detected [ 832.268839][ T2148] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 832.539180][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 832.599652][ T2148] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 832.620130][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.628140][ T2148] usb 5-1: Product: syz [ 832.698535][ T2148] usb 5-1: Manufacturer: syz [ 832.718587][ T2148] usb 5-1: SerialNumber: syz [ 832.758905][ T2148] usb 5-1: config 0 descriptor?? [ 832.873614][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.919362][T16487] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 832.941875][T16487] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 832.983529][T16487] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 833.039676][T16487] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 834.593092][T16487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.993622][T16487] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.054331][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.061518][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.139385][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.146526][ T9748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.207375][T11264] usb 5-1: USB disconnect, device number 21 [ 837.458603][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 837.529457][T17327] overlayfs: failed to resolve './file1': -2 [ 838.524459][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 838.568692][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.668620][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 838.704915][T15991] veth0_vlan: entered promiscuous mode [ 838.728853][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.803365][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 838.816549][T15991] veth1_vlan: entered promiscuous mode [ 838.850937][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.888578][ T9] usb 6-1: Product: syz [ 838.898506][ T9] usb 6-1: Manufacturer: syz [ 838.950292][ T9] usb 6-1: SerialNumber: syz [ 839.209114][T17346] befs: (nullb0): No write support. Marking filesystem read-only [ 839.224266][T17346] befs: (nullb0): invalid magic header [ 839.306174][ T9] usb 6-1: config 0 descriptor?? [ 839.492203][ T9] usb 6-1: can't set config #0, error -71 [ 839.514658][T15991] veth0_macvtap: entered promiscuous mode [ 839.538908][ T9] usb 6-1: USB disconnect, device number 32 [ 839.583453][T15991] veth1_macvtap: entered promiscuous mode [ 839.624396][T17344] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 839.684068][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.972851][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.065694][ T5978] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.118880][ T5978] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.191347][T13726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.221946][T13726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.395975][T16487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.727571][T13726] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.920001][ T2148] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 844.025978][T13726] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.144141][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 844.269906][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 844.298419][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 844.311555][ T2148] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 844.338411][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 844.348589][ T2148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.360780][ T2148] usb 3-1: Product: syz [ 844.365069][ T2148] usb 3-1: Manufacturer: syz [ 844.372440][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 844.381693][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 844.664374][ T2148] usb 3-1: SerialNumber: syz [ 844.670819][T13726] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.708589][ T2148] usb 3-1: config 0 descriptor?? [ 845.130845][T13726] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.321092][T16487] veth0_vlan: entered promiscuous mode [ 845.355035][T17452] overlayfs: failed to resolve './file1': -2 [ 845.489028][T16487] veth1_vlan: entered promiscuous mode [ 845.998894][T17485] loop5: detected capacity change from 0 to 1024 [ 846.061232][T16487] veth0_macvtap: entered promiscuous mode [ 846.091721][T16487] veth1_macvtap: entered promiscuous mode [ 846.226219][T13726] bridge_slave_1: left allmulticast mode [ 846.255047][T13726] bridge_slave_1: left promiscuous mode [ 846.410076][ T5883] Bluetooth: hci4: command tx timeout [ 846.416446][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.572786][T13726] bridge_slave_0: left allmulticast mode [ 846.598206][T13726] bridge_slave_0: left promiscuous mode [ 846.616371][ T24] usb 3-1: USB disconnect, device number 18 [ 846.634333][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.478638][ T5883] Bluetooth: hci4: command tx timeout [ 849.242571][T13726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.359500][T13726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.802469][T13726] bond0 (unregistering): Released all slaves [ 850.207857][T17549] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 850.261047][T17549] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 850.276097][T17549] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 850.332125][T17566] loop4: detected capacity change from 0 to 1024 [ 850.558775][ T5883] Bluetooth: hci4: command tx timeout [ 852.048871][T16487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.122171][T13726] hsr_slave_0: left promiscuous mode [ 852.170591][T13726] hsr_slave_1: left promiscuous mode [ 852.221311][T13726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.308687][T13726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.421527][T13726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.488511][T13726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.572521][T13726] veth1_macvtap: left promiscuous mode [ 852.578024][T13726] veth0_macvtap: left promiscuous mode [ 852.591612][T17659] hub 9-0:1.0: USB hub found [ 852.618600][T17659] hub 9-0:1.0: 1 port detected [ 852.638360][T13726] veth1_vlan: left promiscuous mode [ 852.649532][T13726] veth0_vlan: left promiscuous mode [ 852.688746][ T5883] Bluetooth: hci4: command tx timeout [ 853.518834][ T5943] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 853.573430][T17676] block nbd4: shutting down sockets [ 853.915736][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 853.928011][ T5943] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 853.937446][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.986969][ T5943] usb 2-1: Product: syz [ 853.991390][ T5943] usb 2-1: Manufacturer: syz [ 853.995983][ T5943] usb 2-1: SerialNumber: syz [ 854.351426][ T5943] usb 2-1: config 0 descriptor?? [ 855.190766][T13726] team0 (unregistering): Port device team_slave_1 removed [ 855.369225][T13726] team0 (unregistering): Port device team_slave_0 removed [ 856.354141][T17704] befs: (nullb0): No write support. Marking filesystem read-only [ 856.368844][T17704] befs: (nullb0): invalid magic header [ 856.411514][T17705] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 857.099796][T17653] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 857.170525][T17653] team0: Port device batadv3 added [ 857.183221][T17423] chnl_net:caif_netlink_parms(): no params data found [ 857.302038][T16487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.349300][ T198] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.381775][ T198] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.603673][T17734] loop2: detected capacity change from 0 to 1024 [ 857.650092][ T198] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.689755][ T198] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.636058][T17423] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.259357][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.266859][T17423] bridge_slave_0: entered allmulticast mode [ 859.309155][ T5928] usb 2-1: USB disconnect, device number 22 [ 859.389870][T17423] bridge_slave_0: entered promiscuous mode [ 860.283439][T17423] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.328599][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.335790][T17423] bridge_slave_1: entered allmulticast mode [ 860.847586][T17423] bridge_slave_1: entered promiscuous mode [ 861.614994][T17840] loop1: detected capacity change from 0 to 512 [ 861.718897][T17840] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1117: casefold flag without casefold feature [ 861.806560][T17840] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1117: couldn't read orphan inode 15 (err -117) [ 861.831175][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 861.969377][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.974647][T17840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.125313][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 862.311007][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.334559][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 862.362012][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.385124][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.462583][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 862.481586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.506458][ T9] usb 3-1: Product: syz [ 862.513385][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.547932][ T9] usb 3-1: Manufacturer: syz [ 862.568527][ T9] usb 3-1: SerialNumber: syz [ 862.645863][ T9] usb 3-1: config 0 descriptor?? [ 862.689412][T17839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 862.907866][ T9] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 862.955408][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.003246][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.926773][T17423] team0: Port device team_slave_0 added [ 863.937716][T17423] team0: Port device team_slave_1 added [ 864.603298][T17930] hub 9-0:1.0: USB hub found [ 864.608648][T17930] hub 9-0:1.0: 1 port detected [ 864.682883][ T5928] usb 3-1: USB disconnect, device number 19 [ 864.815286][T17919] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 864.835033][T17919] team0: Port device batadv5 added [ 864.933843][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.959043][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.012884][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.026344][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.039008][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.068548][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.574496][T17423] hsr_slave_0: entered promiscuous mode [ 865.592214][T17423] hsr_slave_1: entered promiscuous mode [ 865.600214][T17423] debugfs: 'hsr0' already exists in 'hsr' [ 865.605945][T17423] Cannot create hsr debugfs directory [ 868.598943][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 869.080792][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 869.122974][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 869.125759][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.158575][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.195665][ T9] usb 3-1: Product: syz [ 869.220068][ T9] usb 3-1: Manufacturer: syz [ 869.265287][ T9] usb 3-1: SerialNumber: syz [ 869.272856][T16492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 869.281739][T16492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 869.290448][T16492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 869.305464][T16492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 869.318401][T16492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 869.346584][ T9] usb 3-1: config 0 descriptor?? [ 869.840926][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.923803][T18157] block nbd4: shutting down sockets [ 871.358644][ T5883] Bluetooth: hci1: command tx timeout [ 871.677332][ T5928] usb 3-1: USB disconnect, device number 20 [ 871.726398][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.061012][T18196] hub 9-0:1.0: USB hub found [ 872.068670][T18196] hub 9-0:1.0: 1 port detected [ 872.356060][T18188] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 872.365096][T18188] team0: Port device batadv6 added [ 872.546296][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.281297][T17423] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 873.430040][T17423] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 873.438891][ T5883] Bluetooth: hci1: command tx timeout [ 873.748101][T17423] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 873.840091][T17423] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 874.159283][ T36] bridge_slave_1: left allmulticast mode [ 874.175985][ T36] bridge_slave_1: left promiscuous mode [ 874.209940][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.405481][ T36] bridge_slave_0: left allmulticast mode [ 874.444705][ T36] bridge_slave_0: left promiscuous mode [ 874.465105][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.801941][T18340] loop4: detected capacity change from 0 to 40427 [ 874.833250][T18340] F2FS-fs (loop4): invalid crc value [ 874.907905][T18340] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 874.918866][T18340] F2FS-fs (loop4): Start checkpoint disabled! [ 874.941080][T18340] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 875.058228][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 875.058251][ T30] audit: type=1800 audit(1756773283.446:463): pid=18340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1137" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 875.302749][T18347] loop1: detected capacity change from 0 to 1024 [ 875.540069][T18351] syz.4.1137: attempt to access beyond end of device [ 875.540069][T18351] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 875.560570][T18351] syz.4.1137: attempt to access beyond end of device [ 875.560570][T18351] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 875.578927][T18351] syz.4.1137: attempt to access beyond end of device [ 875.578927][T18351] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 875.596565][T18351] syz.4.1137: attempt to access beyond end of device [ 875.596565][T18351] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 875.614224][T18351] syz.4.1137: attempt to access beyond end of device [ 875.614224][T18351] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 875.632793][T18351] syz.4.1137: attempt to access beyond end of device [ 875.632793][T18351] loop4: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 875.650486][T18351] syz.4.1137: attempt to access beyond end of device [ 875.650486][T18351] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 875.668478][T18351] syz.4.1137: attempt to access beyond end of device [ 875.668478][T18351] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 875.686307][T18351] syz.4.1137: attempt to access beyond end of device [ 875.686307][T18351] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 875.704658][T18351] syz.4.1137: attempt to access beyond end of device [ 875.704658][T18351] loop4: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 876.069869][ T5883] Bluetooth: hci1: command tx timeout [ 876.736003][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 876.736049][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 876.736071][ T6013] Workqueue: writeback wb_workfn (flush-7:4) [ 876.736130][ T6013] Call Trace: [ 876.736140][ T6013] [ 876.736153][ T6013] dump_stack_lvl+0x16c/0x1f0 [ 876.736205][ T6013] f2fs_handle_critical_error+0x624/0x9f0 [ 876.736254][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.736296][ T6013] ? f2fs_build_fault_attr+0x53/0x1f0 [ 876.736345][ T6013] f2fs_write_end_io+0x958/0xcf0 [ 876.736398][ T6013] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 876.736453][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.736506][ T6013] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 876.736553][ T6013] bio_endio+0x713/0x860 [ 876.736613][ T6013] submit_bio_noacct+0x306/0x1ed0 [ 876.736664][ T6013] __submit_merged_bio+0x33c/0x770 [ 876.736721][ T6013] __submit_merged_write_cond+0x319/0x3f0 [ 876.736784][ T6013] f2fs_write_cache_pages+0x2067/0x2570 [ 876.736869][ T6013] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 876.736923][ T6013] ? ret_from_fork+0x5d7/0x6f0 [ 876.736975][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.737030][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.737083][ T6013] ? unwind_get_return_address+0x59/0xa0 [ 876.737132][ T6013] ? arch_stack_walk+0x88/0x100 [ 876.737204][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.737326][ T6013] ? __pfx___page_table_check_zero+0x10/0x10 [ 876.737387][ T6013] ? mark_held_locks+0x49/0x80 [ 876.737448][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.737492][ T6013] ? lockdep_hardirqs_on+0x7c/0x110 [ 876.737546][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.737600][ T6013] f2fs_write_data_pages+0x4ad/0xd90 [ 876.737672][ T6013] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 876.737747][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.737792][ T6013] ? __lock_acquire+0xb97/0x1ce0 [ 876.737855][ T6013] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 876.737921][ T6013] do_writepages+0x27a/0x600 [ 876.737983][ T6013] ? __pfx_do_writepages+0x10/0x10 [ 876.738029][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.738075][ T6013] ? reacquire_held_locks+0xcd/0x1f0 [ 876.738135][ T6013] ? writeback_sb_inodes+0x3b0/0xfa0 [ 876.738194][ T6013] __writeback_single_inode+0x160/0xfb0 [ 876.738251][ T6013] ? __pfx___writeback_single_inode+0x10/0x10 [ 876.738301][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.738346][ T6013] ? do_raw_spin_unlock+0x172/0x230 [ 876.738389][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.738447][ T6013] writeback_sb_inodes+0x60d/0xfa0 [ 876.738526][ T6013] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 876.738666][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.738722][ T6013] ? rcu_is_watching+0x12/0xc0 [ 876.738777][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.738826][ T6013] ? queue_io+0x3f6/0x520 [ 876.738880][ T6013] wb_writeback+0x419/0xb70 [ 876.738939][ T6013] ? __pfx_wb_writeback+0x10/0x10 [ 876.738990][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739045][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739087][ T6013] ? mark_held_locks+0x49/0x80 [ 876.739150][ T6013] wb_workfn+0x14d/0xbe0 [ 876.739203][ T6013] ? try_to_wake_up+0x160/0x1870 [ 876.739247][ T6013] ? __pfx_wb_workfn+0x10/0x10 [ 876.739300][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739347][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739395][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739436][ T6013] ? rcu_is_watching+0x12/0xc0 [ 876.739488][ T6013] process_one_work+0x9cf/0x1b70 [ 876.739543][ T6013] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 876.739603][ T6013] ? __pfx_process_one_work+0x10/0x10 [ 876.739642][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739699][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739742][ T6013] ? assign_work+0x1a0/0x250 [ 876.739781][ T6013] worker_thread+0x6c8/0xf10 [ 876.739832][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739876][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.739929][ T6013] ? __kthread_parkme+0x19e/0x250 [ 876.739985][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.740038][ T6013] ? __pfx_worker_thread+0x10/0x10 [ 876.740085][ T6013] kthread+0x3c5/0x780 [ 876.740130][ T6013] ? __pfx_kthread+0x10/0x10 [ 876.740179][ T6013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.740230][ T6013] ? rcu_is_watching+0x12/0xc0 [ 876.740278][ T6013] ? __pfx_kthread+0x10/0x10 [ 876.740319][ T6013] ret_from_fork+0x5d7/0x6f0 [ 876.740352][ T6013] ? __pfx_kthread+0x10/0x10 [ 876.740391][ T6013] ret_from_fork_asm+0x1a/0x30 [ 876.740466][ T6013] [ 877.243316][ T6013] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 878.176332][ T5883] Bluetooth: hci1: command tx timeout [ 878.579666][T18370] loop2: detected capacity change from 0 to 512 [ 878.811631][T18370] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1143: casefold flag without casefold feature [ 878.886357][T18370] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1143: couldn't read orphan inode 15 (err -117) [ 879.605924][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.616715][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.631231][T18370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.989594][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.223638][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.417634][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.632316][ T36] bond0 (unregistering): Released all slaves [ 881.938566][T18392] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1146'. [ 882.150734][T18120] chnl_net:caif_netlink_parms(): no params data found [ 883.359772][T18441] hub 9-0:1.0: USB hub found [ 883.369863][T18427] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 883.378371][T18427] team0: Port device batadv4 added [ 883.499155][T18441] hub 9-0:1.0: 1 port detected [ 885.140645][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1152'. [ 885.766883][ T36] hsr_slave_0: left promiscuous mode [ 885.861157][T18497] loop4: detected capacity change from 0 to 1024 [ 885.867701][ T36] hsr_slave_1: left promiscuous mode [ 885.892885][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.949279][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.990133][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.078960][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.190092][ T36] veth1_macvtap: left promiscuous mode [ 886.199887][ T36] veth0_macvtap: left promiscuous mode [ 886.238816][ T36] veth1_vlan: left promiscuous mode [ 886.244174][ T36] veth0_vlan: left promiscuous mode [ 888.111240][T18523] loop2: detected capacity change from 0 to 1024 [ 888.751421][T18527] loop1: detected capacity change from 0 to 512 [ 888.992912][T18527] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1157: casefold flag without casefold feature [ 889.056466][T18527] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1157: couldn't read orphan inode 15 (err -117) [ 889.107593][T18527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.561012][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.838492][T18562] befs: (nullb0): No write support. Marking filesystem read-only [ 890.853884][T18562] befs: (nullb0): invalid magic header [ 892.171107][T18578] loop1: detected capacity change from 0 to 40427 [ 892.221671][T18578] F2FS-fs (loop1): invalid crc value [ 892.284552][T18578] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 892.296332][T18578] F2FS-fs (loop1): Start checkpoint disabled! [ 892.309221][T18578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 892.449518][ T30] audit: type=1800 audit(1756773300.856:464): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1166" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 892.865782][T18592] bio_check_eod: 174 callbacks suppressed [ 892.865831][T18592] syz.1.1166: attempt to access beyond end of device [ 892.865831][T18592] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 892.888008][T18592] syz.1.1166: attempt to access beyond end of device [ 892.888008][T18592] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 892.905453][T18592] syz.1.1166: attempt to access beyond end of device [ 892.905453][T18592] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 892.922980][T18592] syz.1.1166: attempt to access beyond end of device [ 892.922980][T18592] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 892.940435][T18592] syz.1.1166: attempt to access beyond end of device [ 892.940435][T18592] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 892.958618][T18592] syz.1.1166: attempt to access beyond end of device [ 892.958618][T18592] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 892.976437][T18592] syz.1.1166: attempt to access beyond end of device [ 892.976437][T18592] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 892.994262][T18592] syz.1.1166: attempt to access beyond end of device [ 892.994262][T18592] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 893.011987][T18592] syz.1.1166: attempt to access beyond end of device [ 893.011987][T18592] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 893.030025][T18592] syz.1.1166: attempt to access beyond end of device [ 893.030025][T18592] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 893.550945][ T36] team0 (unregistering): Port device team_slave_1 removed [ 893.580762][T18534] CPU: 0 UID: 0 PID: 18534 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 893.580797][T18534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 893.580816][T18534] Workqueue: writeback wb_workfn (flush-7:1) [ 893.580863][T18534] Call Trace: [ 893.580872][T18534] [ 893.580882][T18534] dump_stack_lvl+0x16c/0x1f0 [ 893.580925][T18534] f2fs_handle_critical_error+0x624/0x9f0 [ 893.580963][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.580997][T18534] ? f2fs_build_fault_attr+0x53/0x1f0 [ 893.581035][T18534] f2fs_write_end_io+0x958/0xcf0 [ 893.581076][T18534] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 893.581119][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581160][T18534] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 893.581197][T18534] bio_endio+0x713/0x860 [ 893.581246][T18534] submit_bio_noacct+0x306/0x1ed0 [ 893.581286][T18534] __submit_merged_bio+0x33c/0x770 [ 893.581329][T18534] __submit_merged_write_cond+0x319/0x3f0 [ 893.581377][T18534] f2fs_write_cache_pages+0x2067/0x2570 [ 893.581443][T18534] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 893.581491][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581525][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581558][T18534] ? find_held_lock+0x2b/0x80 [ 893.581594][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581631][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581664][T18534] ? do_raw_spin_unlock+0x172/0x230 [ 893.581706][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581740][T18534] ? f2fs_available_free_memory+0x279/0xa30 [ 893.581820][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581854][T18534] ? lock_acquire+0x179/0x350 [ 893.581899][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.581938][T18534] f2fs_write_data_pages+0x4ad/0xd90 [ 893.581989][T18534] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 893.582041][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.582075][T18534] ? __lock_acquire+0xb97/0x1ce0 [ 893.582120][T18534] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 893.582167][T18534] do_writepages+0x27a/0x600 [ 893.582208][T18534] ? __pfx_do_writepages+0x10/0x10 [ 893.582247][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.582280][T18534] ? reacquire_held_locks+0xcd/0x1f0 [ 893.582324][T18534] ? writeback_sb_inodes+0x3b0/0xfa0 [ 893.582365][T18534] __writeback_single_inode+0x160/0xfb0 [ 893.582407][T18534] ? __pfx___writeback_single_inode+0x10/0x10 [ 893.582444][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.582477][T18534] ? do_raw_spin_unlock+0x172/0x230 [ 893.582508][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.582546][T18534] writeback_sb_inodes+0x60d/0xfa0 [ 893.582600][T18534] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 893.582636][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.582669][T18534] ? find_held_lock+0x2b/0x80 [ 893.582750][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.582782][T18534] ? rcu_is_watching+0x12/0xc0 [ 893.582817][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.582850][T18534] ? queue_io+0x3f6/0x520 [ 893.582885][T18534] wb_writeback+0x419/0xb70 [ 893.582931][T18534] ? __pfx_wb_writeback+0x10/0x10 [ 893.582966][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583008][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583049][T18534] ? mark_held_locks+0x49/0x80 [ 893.583115][T18534] wb_workfn+0x14d/0xbe0 [ 893.583157][T18534] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 893.583197][T18534] ? __pfx_wb_workfn+0x10/0x10 [ 893.583241][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583278][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583316][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583349][T18534] ? rcu_is_watching+0x12/0xc0 [ 893.583389][T18534] process_one_work+0x9cf/0x1b70 [ 893.583435][T18534] ? __pfx_process_one_work+0x10/0x10 [ 893.583466][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583508][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583541][T18534] ? assign_work+0x1a0/0x250 [ 893.583572][T18534] worker_thread+0x6c8/0xf10 [ 893.583610][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583645][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583678][T18534] ? __kthread_parkme+0x19e/0x250 [ 893.583718][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583754][T18534] ? __pfx_worker_thread+0x10/0x10 [ 893.583785][T18534] kthread+0x3c5/0x780 [ 893.583812][T18534] ? __pfx_kthread+0x10/0x10 [ 893.583842][T18534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 893.583875][T18534] ? rcu_is_watching+0x12/0xc0 [ 893.583910][T18534] ? __pfx_kthread+0x10/0x10 [ 893.583939][T18534] ret_from_fork+0x5d7/0x6f0 [ 893.583965][T18534] ? __pfx_kthread+0x10/0x10 [ 893.583993][T18534] ret_from_fork_asm+0x1a/0x30 [ 893.584045][T18534] [ 893.585647][T18534] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 894.226008][ T36] team0 (unregistering): Port device team_slave_0 removed [ 894.695898][T18608] loop4: detected capacity change from 0 to 512 [ 894.733235][T18608] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1169: casefold flag without casefold feature [ 894.815148][T18608] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1169: couldn't read orphan inode 15 (err -117) [ 895.009056][T18608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.025680][T18618] loop5: detected capacity change from 0 to 512 [ 895.056193][T18618] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1170: casefold flag without casefold feature [ 895.075277][T18618] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1170: couldn't read orphan inode 15 (err -117) [ 895.090514][T18618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.361066][ T5881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.384735][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.199119][T18677] loop4: detected capacity change from 0 to 512 [ 899.230137][T18120] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.244896][T18120] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.979154][T18677] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1175: casefold flag without casefold feature [ 900.004448][T18120] bridge_slave_0: entered allmulticast mode [ 900.017517][T18120] bridge_slave_0: entered promiscuous mode [ 900.037776][T18120] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.045655][T18120] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.046196][T18677] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1175: couldn't read orphan inode 15 (err -117) [ 900.053372][T18120] bridge_slave_1: entered allmulticast mode [ 900.073749][T18120] bridge_slave_1: entered promiscuous mode [ 900.141228][T18677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.756449][T18120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.822656][T18710] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1177'. [ 900.862415][T18120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.061343][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.118413][T18120] team0: Port device team_slave_0 added [ 901.307269][T18120] team0: Port device team_slave_1 added [ 901.754837][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 902.163445][T18120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.219791][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.347903][T18819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1183'. [ 902.373783][T18120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.425089][T18818] loop4: detected capacity change from 0 to 512 [ 902.497908][T18818] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1182: casefold flag without casefold feature [ 902.536628][T18818] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1182: couldn't read orphan inode 15 (err -117) [ 902.584911][T18120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.658600][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.686973][T18818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.759660][T18120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.100699][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.344360][T18120] hsr_slave_0: entered promiscuous mode [ 905.419249][T18120] hsr_slave_1: entered promiscuous mode [ 905.473954][T18120] debugfs: 'hsr0' already exists in 'hsr' [ 905.540717][T18120] Cannot create hsr debugfs directory [ 905.582446][T16492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.591663][T16492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.601746][T16492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.610940][T16492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.855183][T16492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 907.579194][T18920] block nbd4: shutting down sockets [ 907.929595][T16492] Bluetooth: hci4: command tx timeout [ 909.998872][T16492] Bluetooth: hci4: command tx timeout [ 911.091617][T18993] loop1: detected capacity change from 0 to 512 [ 911.178688][T18993] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1195: casefold flag without casefold feature [ 911.221540][T18993] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1195: couldn't read orphan inode 15 (err -117) [ 911.353267][T18993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.562904][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.965259][T16492] Bluetooth: hci4: command tx timeout [ 913.298722][ T36] bridge_slave_1: left allmulticast mode [ 913.304386][ T36] bridge_slave_1: left promiscuous mode [ 913.331290][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.489758][ T36] bridge_slave_0: left allmulticast mode [ 913.495401][ T36] bridge_slave_0: left promiscuous mode [ 913.548792][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.038512][T16492] Bluetooth: hci4: command tx timeout [ 915.808503][T19120] befs: (nullb0): No write support. Marking filesystem read-only [ 915.821545][T19120] befs: (nullb0): invalid magic header [ 916.010974][T19120] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 916.105652][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.225892][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.294247][ T36] bond0 (unregistering): Released all slaves [ 916.595905][T19143] overlayfs: failed to resolve './file1': -2 [ 917.285588][ T36] hsr_slave_0: left promiscuous mode [ 917.318568][ T36] hsr_slave_1: left promiscuous mode [ 917.331300][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.373786][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.047663][T19216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 919.151249][ T36] team0 (unregistering): Port device team_slave_1 removed [ 919.202574][ T36] team0 (unregistering): Port device team_slave_0 removed [ 920.011490][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1206'. [ 920.204538][T19222] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 920.227723][T19222] team0: Port device batadv5 added [ 920.261594][T19222] hub 9-0:1.0: USB hub found [ 920.267905][T19222] hub 9-0:1.0: 1 port detected [ 920.592457][T18883] chnl_net:caif_netlink_parms(): no params data found [ 921.439318][T19269] loop1: detected capacity change from 0 to 1024 [ 924.759485][T19353] overlayfs: failed to resolve './file0': -2 [ 925.179572][T18883] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.191633][T18883] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.208766][T18883] bridge_slave_0: entered allmulticast mode [ 925.221044][T18883] bridge_slave_0: entered promiscuous mode [ 925.249827][T18883] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.257346][T18883] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.273665][T18883] bridge_slave_1: entered allmulticast mode [ 925.285228][T18883] bridge_slave_1: entered promiscuous mode [ 925.311804][T18120] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 925.440090][T18120] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 925.690015][T19380] loop4: detected capacity change from 0 to 32768 [ 926.642320][ T30] audit: type=1800 audit(1756773334.956:465): pid=19395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1219" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 927.407985][T18120] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 927.510958][T18883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.534759][T18883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.895813][T18883] team0: Port device team_slave_0 added [ 927.953565][T18883] team0: Port device team_slave_1 added [ 928.274447][T18883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.281635][T18883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.308249][T18883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.346339][T18883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.380390][T18883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.568534][T18883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.898235][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.915685][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.924198][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.934672][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.942588][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 932.972369][T18883] hsr_slave_0: entered promiscuous mode [ 933.327046][T18883] hsr_slave_1: entered promiscuous mode [ 933.491038][T18883] debugfs: 'hsr0' already exists in 'hsr' [ 933.496777][T18883] Cannot create hsr debugfs directory [ 935.038641][T16492] Bluetooth: hci1: command tx timeout [ 936.328989][T19661] loop1: detected capacity change from 0 to 1024 [ 937.118736][T16492] Bluetooth: hci1: command tx timeout [ 937.727611][T19782] loop1: detected capacity change from 0 to 512 [ 937.813420][T19782] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1239: casefold flag without casefold feature [ 937.873278][T19782] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1239: couldn't read orphan inode 15 (err -117) [ 938.486958][T19782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.693024][ T198] bridge_slave_1: left allmulticast mode [ 938.701896][ T198] bridge_slave_1: left promiscuous mode [ 938.707681][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.929982][ T198] bridge_slave_0: left allmulticast mode [ 939.008268][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.013971][ T198] bridge_slave_0: left promiscuous mode [ 939.049600][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.198582][T16492] Bluetooth: hci1: command tx timeout [ 939.351836][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.506036][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.542729][ T198] bond0 (unregistering): Released all slaves [ 941.055920][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.108539][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.374892][T16492] Bluetooth: hci1: command tx timeout [ 942.379017][ T198] hsr_slave_0: left promiscuous mode [ 942.405904][ T198] hsr_slave_1: left promiscuous mode [ 942.486253][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.532102][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.342063][ T198] team0 (unregistering): Port device team_slave_1 removed [ 943.469354][ T198] team0 (unregistering): Port device team_slave_0 removed [ 944.393929][T19531] chnl_net:caif_netlink_parms(): no params data found [ 946.000235][T19918] loop2: detected capacity change from 0 to 512 [ 946.115080][T19918] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1254: casefold flag without casefold feature [ 946.213841][T19918] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1254: couldn't read orphan inode 15 (err -117) [ 946.228823][T18883] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 946.253077][T19918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.489205][T18883] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 946.547707][T19531] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.583435][T19531] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.585422][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.601910][T19531] bridge_slave_0: entered allmulticast mode [ 946.625804][T19531] bridge_slave_0: entered promiscuous mode [ 946.654079][T19531] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.678218][T19531] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.714413][T19531] bridge_slave_1: entered allmulticast mode [ 946.751360][T19531] bridge_slave_1: entered promiscuous mode [ 946.805721][T18883] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 946.867771][T19970] loop2: detected capacity change from 0 to 512 [ 946.894588][T18883] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 946.923480][T19970] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1256: casefold flag without casefold feature [ 946.980597][T19970] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1256: couldn't read orphan inode 15 (err -117) [ 946.994613][T19970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.157933][T19531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.396979][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.480881][T19531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.972581][T19531] team0: Port device team_slave_0 added [ 948.122586][T19531] team0: Port device team_slave_1 added [ 948.449505][T19531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.469218][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.495130][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.586728][T19531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.932367][T19531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.186431][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.323034][T19531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.804854][T19531] hsr_slave_0: entered promiscuous mode [ 949.843788][T19531] hsr_slave_1: entered promiscuous mode [ 949.869314][T19531] debugfs: 'hsr0' already exists in 'hsr' [ 949.878668][T19531] Cannot create hsr debugfs directory [ 951.606425][T18883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.204036][T18883] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.937555][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.944771][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.122137][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.129315][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.029753][T19531] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 954.081794][T19531] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 954.130376][T19531] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 954.539585][T19531] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 954.672226][T20267] loop1: detected capacity change from 0 to 512 [ 954.738945][T20267] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1269: casefold flag without casefold feature [ 954.843885][T19531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.866064][T19531] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.897210][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.904325][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.922501][T20267] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1269: couldn't read orphan inode 15 (err -117) [ 954.961153][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.968282][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.994497][T20267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.046434][T18883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.593171][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.212686][T20301] loop1: detected capacity change from 0 to 32768 [ 956.921613][T20305] loop4: detected capacity change from 0 to 1024 [ 957.702884][ T30] audit: type=1800 audit(1756773365.446:466): pid=20311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1271" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 958.086336][T20311] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 958.086336][T20311] [ 958.129338][T20311] ERROR: (device loop1): remounting filesystem as read-only [ 958.306211][T19531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.268008][ T5876] ------------[ cut here ]------------ [ 959.274052][ T5876] kernel BUG at fs/jfs/inode.c:169! [ 959.372988][ T5876] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 959.379421][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 959.388882][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 959.398932][ T5876] RIP: 0010:jfs_evict_inode+0x3eb/0x4b0 [ 959.404481][ T5876] Code: 24 80 00 74 0d e8 e5 8f 78 fe 48 89 df e8 5d 8c 02 00 e8 d8 8f 78 fe 48 89 df e8 60 b1 15 ff e9 e7 fc ff ff e8 c6 8f 78 fe 90 <0f> 0b 48 c7 c7 e0 2b b9 8e e8 27 f5 dd fe e9 44 fc ff ff e8 1d f5 [ 959.424085][ T5876] RSP: 0018:ffffc900041cfb70 EFLAGS: 00010293 [ 959.430155][ T5876] RAX: 0000000000000000 RBX: ffff888056bbbb80 RCX: ffffffff8258959b [ 959.438118][ T5876] RDX: ffff88802d535a00 RSI: ffffffff8342fdba RDI: ffff888056bbbb70 [ 959.446081][ T5876] RBP: ffff888056bbb808 R08: 0000000000000005 R09: 0000000000000000 [ 959.454040][ T5876] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056bbbda0 [ 959.461999][ T5876] R13: ffffffff8342f9d0 R14: 0000000000000000 R15: ffff888056bbbd48 [ 959.469961][ T5876] FS: 000055556430e500(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 959.478885][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.485461][ T5876] CR2: 00007f60821300a0 CR3: 0000000057b6a000 CR4: 0000000000350ef0 [ 959.493422][ T5876] Call Trace: [ 959.496682][ T5876] [ 959.499597][ T5876] ? __pfx_jfs_evict_inode+0x10/0x10 [ 959.504881][ T5876] evict+0x3e6/0x920 [ 959.508782][ T5876] ? __pfx_evict+0x10/0x10 [ 959.513216][ T5876] ? __pfx___might_resched+0x10/0x10 [ 959.518504][ T5876] ? find_held_lock+0x2b/0x80 [ 959.523190][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.528825][ T5876] ? find_held_lock+0x2b/0x80 [ 959.533507][ T5876] dispose_list+0x117/0x1e0 [ 959.538010][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.543652][ T5876] evict_inodes+0x365/0x460 [ 959.548160][ T5876] ? __pfx_evict_inodes+0x10/0x10 [ 959.553191][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.558834][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.564904][ T5876] ? shrink_dcache_for_umount+0x1a6/0x3e0 [ 959.570643][ T5876] generic_shutdown_super+0xb2/0x390 [ 959.575943][ T5876] kill_block_super+0x3b/0x90 [ 959.580631][ T5876] deactivate_locked_super+0xc1/0x1a0 [ 959.586024][ T5876] deactivate_super+0xde/0x100 [ 959.590806][ T5876] cleanup_mnt+0x225/0x450 [ 959.595243][ T5876] task_work_run+0x150/0x240 [ 959.599838][ T5876] ? __pfx_task_work_run+0x10/0x10 [ 959.604965][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.610599][ T5876] ? __pfx___x64_sys_umount+0x10/0x10 [ 959.615969][ T5876] exit_to_user_mode_loop+0xeb/0x110 [ 959.621251][ T5876] do_syscall_64+0x3f6/0x4c0 [ 959.625859][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.631746][ T5876] RIP: 0033:0x7f0a6738ff17 [ 959.636151][ T5876] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 959.655752][ T5876] RSP: 002b:00007fff26c189a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 959.664160][ T5876] RAX: 0000000000000000 RBX: 00007f0a67411c05 RCX: 00007f0a6738ff17 [ 959.672120][ T5876] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff26c18a60 [ 959.680086][ T5876] RBP: 00007fff26c18a60 R08: 0000000000000000 R09: 0000000000000000 [ 959.688050][ T5876] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff26c19af0 [ 959.696014][ T5876] R13: 00007f0a67411c05 R14: 00000000000e9cdc R15: 00007fff26c19b30 [ 959.703990][ T5876] [ 959.706997][ T5876] Modules linked in: [ 959.712076][ T5876] ---[ end trace 0000000000000000 ]--- [ 959.723360][T18883] veth0_vlan: entered promiscuous mode [ 959.752689][T18883] veth1_vlan: entered promiscuous mode [ 959.790115][T18883] veth0_macvtap: entered promiscuous mode [ 959.798717][T18883] veth1_macvtap: entered promiscuous mode [ 959.813240][T18883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.823266][T18883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.868457][ T5876] RIP: 0010:jfs_evict_inode+0x3eb/0x4b0 [ 959.874030][ T5876] Code: 24 80 00 74 0d e8 e5 8f 78 fe 48 89 df e8 5d 8c 02 00 e8 d8 8f 78 fe 48 89 df e8 60 b1 15 ff e9 e7 fc ff ff e8 c6 8f 78 fe 90 <0f> 0b 48 c7 c7 e0 2b b9 8e e8 27 f5 dd fe e9 44 fc ff ff e8 1d f5 [ 959.964440][ T9748] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.973570][ T9748] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.023520][ T5876] RSP: 0018:ffffc900041cfb70 EFLAGS: 00010293 [ 960.052707][T20336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 960.097745][ T5876] RAX: 0000000000000000 RBX: ffff888056bbbb80 RCX: ffffffff8258959b [ 960.128514][ T9748] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.148561][ T5876] RDX: ffff88802d535a00 RSI: ffffffff8342fdba RDI: ffff888056bbbb70 [ 960.156549][ T5876] RBP: ffff888056bbb808 R08: 0000000000000005 R09: 0000000000000000 [ 960.204315][ T9748] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.238613][ T5876] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056bbbda0 [ 960.268486][ T5876] R13: ffffffff8342f9d0 R14: 0000000000000000 R15: ffff888056bbbd48 [ 960.276477][ T5876] FS: 000055556430e500(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 960.309651][T18883] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 960.319043][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.536505][ T5876] CR2: 00007fcbe2cacc14 CR3: 0000000057b6a000 CR4: 0000000000350ef0 [ 960.553378][ T5876] Kernel panic - not syncing: Fatal exception [ 960.559637][ T5876] Kernel Offset: disabled [ 960.563947][ T5876] Rebooting in 86400 seconds..