last executing test programs: 18m19.587832847s ago: executing program 32 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 18m6.814914351s ago: executing program 33 (id=405): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x25) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00f6ff00df00042d5ecc040000000000000000000011", @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x20, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xd24206218ee5e012, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 15m1.27299704s ago: executing program 34 (id=1514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="04000000000000000000010000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0) 14m20.665356764s ago: executing program 35 (id=1740): r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000003000), 0x201, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 11m21.485381267s ago: executing program 36 (id=2224): r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000000)={0xfeff, 0x0, 0x3, 0x1d, 0x100, 0x0}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f0000001200)=0x7, 0x0, 0x1, 0x81, 0x9, 0x7, 0x24, 0x7ff}}], 0x58}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m54.258069252s ago: executing program 37 (id=2281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="738700000000000000000100000008000100000000000c00060000000000"], 0x30}}, 0x0) 10m36.259901207s ago: executing program 9 (id=2337): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d85000000070000008500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) 10m32.414723882s ago: executing program 9 (id=2340): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='svc_xprt_create_err\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2089, 0x0) listen(r4, 0x0) 10m28.52869377s ago: executing program 9 (id=2345): socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000080)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x11, &(0x7f0000000180)=0x0) io_submit(r1, 0x2, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xc99e, 0xffffffffffffffff, &(0x7f0000000000)="8d98bc", 0x3, 0xb, 0x0, 0xd97393af9ce72a1d}]) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) 10m18.670033587s ago: executing program 9 (id=2361): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='svc_xprt_create_err\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2089, 0x0) listen(r4, 0x0) 10m17.382030316s ago: executing program 9 (id=2365): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = userfaultfd(0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000200), 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$sock(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003440), 0x0, 0x0, 0x0, 0xf000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) open$dir(0x0, 0x2, 0x0) rename(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000}) 10m15.13909324s ago: executing program 9 (id=2368): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet(r1, 0x0, 0x4000) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x2}, 0x8) 9m59.60920635s ago: executing program 38 (id=2368): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet(r1, 0x0, 0x4000) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x2}, 0x8) 8m18.401922276s ago: executing program 4 (id=2586): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8m15.865880907s ago: executing program 4 (id=2591): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000800)}], 0x2, 0x0, 0x0, 0x900}}], 0x2, 0x24000004) 8m12.25123858s ago: executing program 6 (id=2595): socket(0x1e, 0x805, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) pipe(&(0x7f0000000080)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x11, &(0x7f0000000180)=0x0) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r1, &(0x7f0000000080)='\x00', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xc99e, 0xffffffffffffffff, &(0x7f0000000000)="8d98bc", 0x3, 0xb, 0x0, 0xd97393af9ce72a1d}]) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) 8m12.250904563s ago: executing program 4 (id=2596): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = gettid() ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x5f, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x2f, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x479, 0x0, 0x0, 0x0, 0x5}, [@generic={0xfa, 0x4, 0xe, 0x3, 0xc}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r0, r0], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 8m8.91149105s ago: executing program 4 (id=2602): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x4}}, 0x278, 0x6a, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8m8.451953429s ago: executing program 4 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e6963766630000000000000000000000800050006"], 0x44}}, 0x0) 8m8.090541437s ago: executing program 6 (id=2605): socket$inet6_dccp(0xa, 0x6, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r1], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r0], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 8m6.995359738s ago: executing program 2 (id=2606): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) 8m6.727582421s ago: executing program 4 (id=2608): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) listen(r5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001980)) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) 8m5.807619384s ago: executing program 6 (id=2612): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m4.979989062s ago: executing program 2 (id=2613): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='svc_xprt_create_err\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2089, 0x0) 8m3.642259799s ago: executing program 2 (id=2614): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = gettid() ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x5f, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x2f, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x479, 0x0, 0x0, 0x0, 0x5}, [@generic={0xfa, 0x4, 0xe, 0x3, 0xc}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r0, r0], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 8m2.365569112s ago: executing program 6 (id=2617): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x4}}, 0x278, 0x6a, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8m2.050645331s ago: executing program 6 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r5, &(0x7f0000000180)='./file1\x00', r5, &(0x7f00000001c0)='./file3\x00', 0x0) 8m0.798574924s ago: executing program 2 (id=2621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) 8m0.762785016s ago: executing program 6 (id=2622): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x80000000}, &(0x7f00000001c0)=0x8) 7m59.254729982s ago: executing program 2 (id=2626): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001980)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) 7m57.802468713s ago: executing program 2 (id=2630): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m51.548952691s ago: executing program 39 (id=2608): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) listen(r5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001980)) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) 7m45.026103554s ago: executing program 40 (id=2622): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x80000000}, &(0x7f00000001c0)=0x8) 7m41.654855585s ago: executing program 41 (id=2630): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.79187007s ago: executing program 0 (id=3357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = dup2(r1, r1) write$FUSE_INIT(r2, &(0x7f0000003540)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x4, 0x8220, 0x5, 0xfffb, 0x2, 0x9}}, 0x50) 1m14.014086868s ago: executing program 0 (id=3358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x0) 1m13.027587065s ago: executing program 0 (id=3359): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x2, 0x0) rename(&(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x0, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xb}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x0) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}], 0x20}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040), 0x0, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) 1m12.127309821s ago: executing program 0 (id=3360): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) recvmmsg(r0, 0x0, 0x0, 0x40000022, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x42, {0x10}, {0x8000000}, {}, {0x400, 0x200}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000c8, 0x0, 0x0, 0x2d, 0x1, 0x0, 0x5}) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 1m10.908252473s ago: executing program 0 (id=3363): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) mknod$loop(0x0, 0x100000000000600d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) 1m9.314030765s ago: executing program 0 (id=3364): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) listen(r5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001980)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) 52.296413352s ago: executing program 42 (id=3364): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) listen(r5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001980)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) 44.1954257s ago: executing program 1 (id=3418): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) 44.082450019s ago: executing program 1 (id=3422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x0) 39.455781037s ago: executing program 1 (id=3426): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.768423069s ago: executing program 1 (id=3433): prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 34.259760513s ago: executing program 1 (id=3434): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) socket$kcm(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x8010) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) inotify_init1(0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 31.28667858s ago: executing program 1 (id=3438): creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x10400, 0x2) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) io_uring_setup(0x354a, 0x0) close(0x3) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c009900000000003c000000140004006e6963766630000000000000000000000800050007000000e2688c"], 0x44}}, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 27.17212016s ago: executing program 5 (id=3446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x3a) ioctl$SIOCAX25ADDUID(r1, 0x89e7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = dup2(r2, r2) write$FUSE_INIT(r3, &(0x7f0000003540)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x4, 0x8220, 0x5, 0xfffb, 0x2, 0x9}}, 0x50) 25.98698916s ago: executing program 5 (id=3448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4b8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) 18.266153318s ago: executing program 5 (id=3461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 16.865757434s ago: executing program 8 (id=3464): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 14.642844647s ago: executing program 43 (id=3438): creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x10400, 0x2) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) io_uring_setup(0x354a, 0x0) close(0x3) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c009900000000003c000000140004006e6963766630000000000000000000000800050007000000e2688c"], 0x44}}, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 12.13285968s ago: executing program 8 (id=3469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x94, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x59, 0x7, 0x1, 0x0, "b84217c51f89c0e565ea285ace171e60542dba97c8cfa89fca6c4844081f8b8771063203846cb54dadabd448dd991467d3657d7ec56d71ee17d979c85f5f38629185cb23ca9d098efe4e14d0250d1b8aaa0d1d1815"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x94}}, 0x0) 11.414935838s ago: executing program 8 (id=3471): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 11.160127577s ago: executing program 5 (id=3473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x1}, {0x0, 0x0, 0x4, 0x0, '..^\''}}]}, 0x0, 0x0}) 9.183370525s ago: executing program 5 (id=3475): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000400)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@checkpoint_diasble}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getsockname$packet(r0, 0x0, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x80bd, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 8.652381331s ago: executing program 3 (id=3477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_getlink={0x20, 0x12, 0x4, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20001010) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='omfs\x00', 0x0, 0x0) 8.638799848s ago: executing program 8 (id=3478): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) socket$kcm(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x8010) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xc0000484) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 7.611707145s ago: executing program 7 (id=3479): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800", @ANYRES32, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='^-!+\'/]@+\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffdef) 7.110837502s ago: executing program 8 (id=3480): close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 6.702445008s ago: executing program 8 (id=3481): socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) 6.559622146s ago: executing program 7 (id=3482): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0x1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4, 0xfffd, 0xa}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) 5.187695407s ago: executing program 5 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 5.139491746s ago: executing program 3 (id=3484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 4.806036346s ago: executing program 7 (id=3485): creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x10400, 0x2) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) io_uring_setup(0x354a, 0x0) close(0x3) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c009900000000003c000000140004006e6963766630000000000000000000000800050007000000e2688c"], 0x44}}, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 3.691630017s ago: executing program 3 (id=3486): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.210471175s ago: executing program 7 (id=3487): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.171830374s ago: executing program 7 (id=3488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r4, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000040)='./file1\x00', 0x0) 2.008775981s ago: executing program 3 (id=3489): creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x10400, 0x2) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) io_uring_setup(0x354a, 0x0) close(0x3) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c009900000000003c000000140004006e6963766630000000000000000000000800050007000000e2688c"], 0x44}}, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 996.415042ms ago: executing program 3 (id=3490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 239.358851ms ago: executing program 7 (id=3491): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) mknod$loop(0x0, 0x100000000000600d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) 0s ago: executing program 3 (id=3492): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) socket$kcm(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x8010) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) kernel console output (not intermixed with test programs): e interface descriptor's value: 68 [ 965.161125][ T964] usb 4-1: config 1 interface 0 has no altsetting 0 [ 965.202215][ T964] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 965.211535][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.219549][ T964] usb 4-1: Product: syz [ 965.224298][ T964] usb 4-1: Manufacturer: syz [ 965.228911][ T964] usb 4-1: SerialNumber: syz [ 965.646027][T17670] trusted_key: encrypted_key: insufficient parameters specified [ 966.181003][T17651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.195952][T17651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.427080][ T964] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 967.155065][T17683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.232058][T17683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.267981][T17555] chnl_net:caif_netlink_parms(): no params data found [ 967.383806][T17683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.474114][T17683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.371455][ T5951] usb 4-1: USB disconnect, device number 34 [ 968.431834][ T5951] usblp0: removed [ 969.199338][T17581] chnl_net:caif_netlink_parms(): no params data found [ 970.492291][T17555] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.566358][T17555] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.607149][T17555] bridge_slave_0: entered allmulticast mode [ 970.644115][T17555] bridge_slave_0: entered promiscuous mode [ 970.849634][T17555] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.887342][T17555] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.951364][T17555] bridge_slave_1: entered allmulticast mode [ 970.977758][T17555] bridge_slave_1: entered promiscuous mode [ 972.103849][T17555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.352994][T17581] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.360127][T17581] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.426938][T17581] bridge_slave_0: entered allmulticast mode [ 972.442333][T17581] bridge_slave_0: entered promiscuous mode [ 972.933256][T17555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.431999][T17581] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.439258][T17581] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.765506][T17581] bridge_slave_1: entered allmulticast mode [ 973.802263][T17581] bridge_slave_1: entered promiscuous mode [ 974.072926][T17555] team0: Port device team_slave_0 added [ 974.080337][T17555] team0: Port device team_slave_1 added [ 974.103278][T17581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.143135][T17581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.834167][T17555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.849695][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.881613][T17555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.895535][T17555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.912766][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.135656][T17555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.191460][T17581] team0: Port device team_slave_0 added [ 976.206394][T17581] team0: Port device team_slave_1 added [ 979.035456][T17555] hsr_slave_0: entered promiscuous mode [ 979.104281][T17555] hsr_slave_1: entered promiscuous mode [ 979.156293][T17555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.191022][T17555] Cannot create hsr debugfs directory [ 979.233675][T17581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.251030][T17581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.439111][T17581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.924032][T17581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.944328][T17581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.067795][T17581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.453497][T17581] hsr_slave_0: entered promiscuous mode [ 981.301166][T17581] hsr_slave_1: entered promiscuous mode [ 981.329435][T17817] loop8: detected capacity change from 0 to 256 [ 981.337859][T17581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.371736][T17581] Cannot create hsr debugfs directory [ 981.399876][T17817] FAT-fs (loop8): Directory bread(block 64) failed [ 981.443622][T17817] FAT-fs (loop8): Directory bread(block 65) failed [ 981.450272][T17817] FAT-fs (loop8): Directory bread(block 66) failed [ 981.491610][T17817] FAT-fs (loop8): Directory bread(block 67) failed [ 981.552294][T17817] FAT-fs (loop8): Directory bread(block 68) failed [ 981.558870][T17817] FAT-fs (loop8): Directory bread(block 69) failed [ 981.604990][T17817] FAT-fs (loop8): Directory bread(block 70) failed [ 981.641536][T17817] FAT-fs (loop8): Directory bread(block 71) failed [ 981.652943][T17817] FAT-fs (loop8): Directory bread(block 72) failed [ 981.659496][T17817] FAT-fs (loop8): Directory bread(block 73) failed [ 982.625593][T17833] overlayfs: failed to resolve './file1': -2 [ 983.932767][T17819] loop3: detected capacity change from 0 to 40427 [ 983.951434][T17819] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 983.994912][T17819] F2FS-fs (loop3): Image doesn't support compression [ 984.034489][T17819] F2FS-fs (loop3): Image doesn't support compression [ 984.041889][T17819] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 984.177134][T17819] F2FS-fs (loop3): invalid crc value [ 984.342612][T17819] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 985.100559][ T8877] bridge_slave_1: left allmulticast mode [ 985.221044][ T8877] bridge_slave_1: left promiscuous mode [ 985.221272][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.359196][ T8877] bridge_slave_0: left allmulticast mode [ 985.359229][ T8877] bridge_slave_0: left promiscuous mode [ 985.359404][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.525531][T17862] misc userio: No port type given on /dev/userio [ 986.704058][ T8877] bridge_slave_1: left allmulticast mode [ 986.709767][ T8877] bridge_slave_1: left promiscuous mode [ 986.721791][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.069008][T17868] trusted_key: encrypted_key: insufficient parameters specified [ 987.814352][ T8877] bridge_slave_0: left allmulticast mode [ 988.131348][ T8877] bridge_slave_0: left promiscuous mode [ 988.148474][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.505292][ T5860] Bluetooth: hci7: command 0x0405 tx timeout [ 988.782533][ T5901] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 989.080997][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 989.107681][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 989.161598][ T5901] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 989.218463][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.287542][ T5901] usb 4-1: Product: syz [ 989.332786][ T5901] usb 4-1: Manufacturer: syz [ 989.374849][ T5901] usb 4-1: SerialNumber: syz [ 989.579752][ T5901] usb 4-1: config 0 descriptor?? [ 989.613349][T17880] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 989.656822][ T5901] hub 4-1:0.0: bad descriptor, ignoring hub [ 989.686326][ T5901] hub 4-1:0.0: probe with driver hub failed with error -5 [ 989.708525][ T5901] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 989.834556][ T8877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.895360][ T5906] usb 4-1: USB disconnect, device number 35 [ 989.901340][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 989.911245][ T8877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.948320][ T8877] bond0 (unregistering): Released all slaves [ 989.988449][ T8877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.041136][ T8877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.062547][ T8877] bond0 (unregistering): Released all slaves [ 991.341025][ T8877] hsr_slave_0: left promiscuous mode [ 991.643409][ T8877] hsr_slave_1: left promiscuous mode [ 991.765575][ T8877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.941660][ T8877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.011026][ T8877] hsr_slave_0: left promiscuous mode [ 992.101718][ T8877] hsr_slave_1: left promiscuous mode [ 992.183719][ T8877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.212855][ T8877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.435347][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.442300][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.621048][T17944] overlayfs: failed to resolve './file1': -2 [ 996.016137][ T8877] team0 (unregistering): Port device team_slave_1 removed [ 996.191627][T13489] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 996.249783][ T8877] team0 (unregistering): Port device team_slave_0 removed [ 997.209339][T13489] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.219679][T13489] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 997.228902][T13489] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 997.256100][T13489] usb 4-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 997.265236][T13489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.276258][T13489] usb 4-1: Product: syz [ 997.280445][T13489] usb 4-1: Manufacturer: syz [ 997.294938][T13489] usb 4-1: SerialNumber: syz [ 997.312040][T13489] usb 4-1: config 0 descriptor?? [ 997.570953][T13489] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 997.688925][ T8877] team0 (unregistering): Port device team_slave_1 removed [ 997.716952][T13489] usb 2-1: device descriptor read/64, error -71 [ 997.737731][ T8877] team0 (unregistering): Port device team_slave_0 removed [ 997.979716][T13489] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 998.153597][T13489] usb 2-1: device descriptor read/64, error -71 [ 998.261272][T13489] usb usb2-port1: attempt power cycle [ 998.403337][T17555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 998.488055][T17555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 999.371281][T13489] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 999.461967][T13489] usb 2-1: device descriptor read/8, error -71 [ 999.526198][T17555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 999.547394][ T5906] usb 4-1: USB disconnect, device number 36 [ 999.633439][T17555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 999.732281][T13489] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 999.821836][T13489] usb 2-1: device descriptor read/8, error -71 [ 1000.016566][T13489] usb usb2-port1: unable to enumerate USB device [ 1000.021060][T18021] trusted_key: encrypted_key: insufficient parameters specified [ 1002.324902][T17555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.342216][T17555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.374554][T17555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1002.385130][T17555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.406132][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.413327][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.424385][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.431787][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.918904][T18042] trusted_key: encrypted_key: insufficient parameters specified [ 1003.579322][T18029] loop3: detected capacity change from 0 to 40427 [ 1003.613099][T18029] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 1003.646977][T18029] F2FS-fs (loop3): Image doesn't support compression [ 1003.684313][T18029] F2FS-fs (loop3): Image doesn't support compression [ 1003.696993][T18029] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 1003.861251][T18029] F2FS-fs (loop3): invalid crc value [ 1003.947748][T17555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.976100][T17581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1004.001907][T18029] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1004.380717][T18029] F2FS-fs (loop3): Start checkpoint disabled! [ 1004.392933][T17581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1004.407982][T18029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1004.494434][T17581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1004.842883][T17581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1005.095086][T17581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.124387][T17581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.159818][T17581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1005.170723][T17581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1005.223208][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.230450][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.266067][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.273345][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.499032][T18093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1007.128440][T17555] veth0_vlan: entered promiscuous mode [ 1007.183868][ T29] audit: type=1326 audit(1731673258.751:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1007.244074][T17555] veth1_vlan: entered promiscuous mode [ 1007.357462][ T29] audit: type=1326 audit(1731673258.781:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1007.367713][T17581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.421184][ T29] audit: type=1326 audit(1731673258.781:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1007.545863][ T29] audit: type=1326 audit(1731673258.781:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1007.574572][T17555] veth0_macvtap: entered promiscuous mode [ 1007.924167][ T29] audit: type=1326 audit(1731673258.781:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1008.026457][ T29] audit: type=1326 audit(1731673258.781:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1008.138066][ T29] audit: type=1326 audit(1731673258.781:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1008.280313][ T29] audit: type=1326 audit(1731673258.781:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1008.351165][ T29] audit: type=1326 audit(1731673258.781:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1008.389052][ T29] audit: type=1326 audit(1731673258.781:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db477e719 code=0x7fc00000 [ 1008.483192][T17555] veth1_macvtap: entered promiscuous mode [ 1011.579645][T18136] trusted_key: encrypted_key: insufficient parameters specified [ 1012.428125][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.436879][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1012.449836][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.467854][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1012.491093][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.502755][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1012.512854][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.522017][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1012.534629][T18149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1012.542482][T18149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.589433][T18149] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1012.612031][T18149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1013.798740][T18156] Bluetooth: MGMT ver 1.23 [ 1014.683300][ T5844] Bluetooth: hci2: command tx timeout [ 1014.690932][T18149] Bluetooth: hci0: command tx timeout [ 1016.996346][ T5844] Bluetooth: hci2: command tx timeout [ 1017.002992][ T5844] Bluetooth: hci0: command tx timeout [ 1018.846187][T18193] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1019.146522][ T5860] Bluetooth: hci0: command tx timeout [ 1019.152352][ T5860] Bluetooth: hci2: command 0x040f tx timeout [ 1021.005535][T18145] chnl_net:caif_netlink_parms(): no params data found [ 1021.236203][ T5844] Bluetooth: hci0: command tx timeout [ 1021.241820][T18149] Bluetooth: hci2: command 0x040f tx timeout [ 1021.425451][T18143] chnl_net:caif_netlink_parms(): no params data found [ 1021.685396][T18220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1023.786498][ T5860] Bluetooth: hci2: command 0x040f tx timeout [ 1024.582838][T18145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.603645][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.831298][T18145] bridge_slave_0: entered allmulticast mode [ 1025.793000][T18145] bridge_slave_0: entered promiscuous mode [ 1025.801693][T18145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.808825][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.816193][T18145] bridge_slave_1: entered allmulticast mode [ 1025.824335][T18145] bridge_slave_1: entered promiscuous mode [ 1026.304509][T18145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.356298][ T3422] bridge_slave_1: left allmulticast mode [ 1026.373112][ T3422] bridge_slave_1: left promiscuous mode [ 1026.417451][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.624046][ T3422] bridge_slave_0: left allmulticast mode [ 1026.767161][ T3422] bridge_slave_0: left promiscuous mode [ 1026.928237][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.172288][T18269] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1032.568234][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.600963][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.617952][ T3422] bond0 (unregistering): Released all slaves [ 1032.631135][T18143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.644668][T18143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.652392][T18143] bridge_slave_0: entered allmulticast mode [ 1032.670597][T18143] bridge_slave_0: entered promiscuous mode [ 1032.938982][T18145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.047540][T18143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.097204][T18143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.153356][T18143] bridge_slave_1: entered allmulticast mode [ 1033.295430][T18143] bridge_slave_1: entered promiscuous mode [ 1033.541108][ T3422] hsr_slave_0: left promiscuous mode [ 1034.036488][ T3422] hsr_slave_1: left promiscuous mode [ 1034.246230][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.542892][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.803947][ T3422] veth1_macvtap: left promiscuous mode [ 1034.809511][ T3422] veth0_macvtap: left promiscuous mode [ 1034.824012][ T3422] veth1_vlan: left promiscuous mode [ 1034.840294][ T3422] veth0_vlan: left promiscuous mode [ 1037.384102][T18325] trusted_key: encrypted_key: insufficient parameters specified [ 1038.287210][T18329] overlayfs: overlapping lowerdir path [ 1038.945688][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 1039.083081][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 1041.526405][T18143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.608713][T18143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.833773][T18145] team0: Port device team_slave_0 added [ 1041.925778][T18145] team0: Port device team_slave_1 added [ 1042.196192][T18354] loop0: detected capacity change from 0 to 256 [ 1042.213073][T18143] team0: Port device team_slave_0 added [ 1042.328039][T18145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.339372][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.365410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.124746][T18145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.222628][T18143] team0: Port device team_slave_1 added [ 1043.301925][T18145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.309363][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.430591][T18145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.501066][ T964] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1043.585613][T18143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.607908][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.656501][T18143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.141814][T18143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.364089][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.483077][T18143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.502925][ T964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.514103][ T964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.525630][ T964] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.538727][ T964] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.547891][ T964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.601345][ T964] usb 2-1: config 0 descriptor?? [ 1044.656204][T18145] hsr_slave_0: entered promiscuous mode [ 1044.663167][T18145] hsr_slave_1: entered promiscuous mode [ 1044.669509][T18145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.678324][T18145] Cannot create hsr debugfs directory [ 1045.037399][T18143] hsr_slave_0: entered promiscuous mode [ 1045.045089][T18143] hsr_slave_1: entered promiscuous mode [ 1045.055965][ T964] usbhid 2-1:0.0: can't add hid device: -71 [ 1045.066111][ T964] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1045.135537][T18143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1045.169193][T18143] Cannot create hsr debugfs directory [ 1045.171417][ T964] usb 2-1: USB disconnect, device number 12 [ 1045.786451][T18376] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1046.717547][T18367] loop3: detected capacity change from 0 to 40427 [ 1047.198454][T18367] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 1047.266322][T18367] F2FS-fs (loop3): Image doesn't support compression [ 1047.306385][T18367] F2FS-fs (loop3): Image doesn't support compression [ 1047.328236][T18367] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 1047.353259][T18367] F2FS-fs (loop3): invalid crc value [ 1047.487779][T18367] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1047.778159][T18389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1048.854241][T18367] F2FS-fs (loop3): Start checkpoint disabled! [ 1048.862182][T18367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1052.035875][ T3422] bridge_slave_1: left allmulticast mode [ 1052.051617][ T3422] bridge_slave_1: left promiscuous mode [ 1052.057359][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.232474][ T3422] bridge_slave_0: left allmulticast mode [ 1053.238351][ T3422] bridge_slave_0: left promiscuous mode [ 1053.311350][ T5900] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1053.509062][T18427] overlayfs: overlapping lowerdir path [ 1053.604126][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.898830][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.906384][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.761083][ T5900] usb 2-1: device descriptor read/all, error -71 [ 1056.498341][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.518094][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.543005][ T3422] bond0 (unregistering): Released all slaves [ 1057.002537][ T3422] hsr_slave_0: left promiscuous mode [ 1057.026467][T18480] loop2: detected capacity change from 0 to 7 [ 1057.052434][T18480] Dev loop2: unable to read RDB block 7 [ 1057.081310][T18480] loop2: unable to read partition table [ 1057.087148][T18480] loop2: partition table beyond EOD, truncated [ 1057.104406][ T3422] hsr_slave_1: left promiscuous mode [ 1057.321094][T18480] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1057.757021][T18488] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1058.413610][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.471496][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.478871][T18492] loop8: detected capacity change from 0 to 1024 [ 1058.513857][T18492] EXT4-fs: inline encryption not supported [ 1058.529594][T18492] EXT4-fs: Ignoring removed orlov option [ 1058.558075][T18492] EXT4-fs: Ignoring removed nobh option [ 1058.753386][T18492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1059.241583][T18492] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.287623][T18482] loop1: detected capacity change from 0 to 40427 [ 1059.300396][T18482] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 1059.312504][T18482] F2FS-fs (loop1): Image doesn't support compression [ 1059.319756][T18482] F2FS-fs (loop1): Image doesn't support compression [ 1059.326656][T18482] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 1059.338048][T18482] F2FS-fs (loop1): invalid crc value [ 1059.350342][T18482] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1059.430036][T18482] F2FS-fs (loop1): Start checkpoint disabled! [ 1059.531320][T18482] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1061.666444][ T8878] bio_check_eod: 685 callbacks suppressed [ 1061.666469][ T8878] kworker/u8:14: attempt to access beyond end of device [ 1061.666469][ T8878] loop1: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 1061.720486][ T8878] kworker/u8:14: attempt to access beyond end of device [ 1061.720486][ T8878] loop1: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 1061.784767][ T8878] kworker/u8:14: attempt to access beyond end of device [ 1061.784767][ T8878] loop1: rw=1, sector=49152, nr_sectors = 2960 limit=40427 [ 1061.810123][ T7252] kworker/u8:11: attempt to access beyond end of device [ 1061.810123][ T7252] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1061.824441][ T7252] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1061.831549][ T7252] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1061.838492][ T7252] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1061.968510][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 1062.237308][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 1063.234876][ T5900] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1063.418300][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.454950][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.508794][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1063.555633][T16275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.566353][ T5900] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1063.612301][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.635900][ T5900] usb 2-1: config 0 descriptor?? [ 1064.344331][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1064.504176][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1064.540018][T18529] trusted_key: encrypted_key: insufficient parameters specified [ 1064.965538][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.001019][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.008521][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.015078][T18145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1065.091175][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.129696][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.147600][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.179885][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.210986][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.243007][ T5900] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1065.272459][ T5900] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1065.529479][T18145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1065.536339][ T5900] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1065.651061][ T5900] usb 2-1: USB disconnect, device number 15 [ 1065.989068][T18145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1066.314684][T18543] misc userio: No port type given on /dev/userio [ 1066.542005][T18145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1066.772654][T18145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.789311][T18145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.824526][T18145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1066.835112][T18145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.897586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.904956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.381747][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.388864][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.825655][T18574] overlayfs: overlapping lowerdir path [ 1069.495653][T18145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.758924][T18143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1069.823693][T18143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1069.873798][T18143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1070.272807][ T964] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1070.871570][T18581] loop0: detected capacity change from 0 to 40427 [ 1071.142419][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1071.165167][ T5860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1071.213857][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1071.229911][ T5860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1071.237230][T18581] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1071.246136][ T964] usb 4-1: Using ep0 maxpacket: 32 [ 1071.261006][ T964] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1071.263652][ T5860] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1071.288325][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1071.321220][T18581] F2FS-fs (loop0): Image doesn't support compression [ 1071.336109][T18581] F2FS-fs (loop0): Image doesn't support compression [ 1071.344713][T18581] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 1071.439766][ T964] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1071.487220][T18581] F2FS-fs (loop0): invalid crc value [ 1071.518943][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.620541][T18581] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1071.632528][ T964] usb 4-1: Product: syz [ 1071.735329][ T964] usb 4-1: Manufacturer: syz [ 1071.747818][ T964] usb 4-1: SerialNumber: syz [ 1072.168327][ T964] usb 4-1: config 0 descriptor?? [ 1072.242132][T18587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1072.298450][T18581] F2FS-fs (loop0): Start checkpoint disabled! [ 1072.303888][ T964] hub 4-1:0.0: bad descriptor, ignoring hub [ 1072.338770][ T964] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1072.354208][ T964] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 1072.377898][T18581] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1072.777967][ T5904] usb 4-1: USB disconnect, device number 37 [ 1072.777993][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1072.784072][ T5906] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1073.321225][T18629] syz.0.3078: attempt to access beyond end of device [ 1073.321225][T18629] loop0: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 1073.593083][T18629] syz.0.3078: attempt to access beyond end of device [ 1073.593083][T18629] loop0: rw=2049, sector=79880, nr_sectors = 880 limit=40427 [ 1073.694677][ T5860] Bluetooth: hci6: command tx timeout [ 1073.950920][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.962365][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.991031][ T5906] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1074.038442][ T5906] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1074.068687][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.068687][ T6771] loop0: rw=1, sector=80760, nr_sectors = 1160 limit=40427 [ 1074.075729][T18601] chnl_net:caif_netlink_parms(): no params data found [ 1074.090315][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.090441][ T964] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1074.130773][ T5906] usb 9-1: config 0 descriptor?? [ 1074.210187][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.210187][ T6771] loop0: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 1074.313823][ T964] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1074.341506][ T964] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1074.386001][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.386001][ T6771] loop0: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 1074.410119][ T964] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1074.450111][ T964] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1074.469539][ T964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.489730][ T964] usb 2-1: Product: syz [ 1074.497291][ T964] usb 2-1: Manufacturer: syz [ 1074.504409][ T964] usb 2-1: SerialNumber: syz [ 1074.532825][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.532825][ T6771] loop0: rw=1, sector=57344, nr_sectors = 2056 limit=40427 [ 1074.573862][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.587661][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.615917][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.632863][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.632863][ T6771] loop0: rw=1, sector=59400, nr_sectors = 2048 limit=40427 [ 1074.655654][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.656021][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1074.679624][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1074.687865][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.704841][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1074.720032][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.730656][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1074.752251][ T5860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1074.770422][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1074.774013][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.819350][T18601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.824710][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.824710][ T6771] loop0: rw=1, sector=61448, nr_sectors = 2288 limit=40427 [ 1074.852783][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.860201][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.868943][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.871090][T18601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.885830][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.885830][ T6771] loop0: rw=1, sector=63736, nr_sectors = 712 limit=40427 [ 1074.900049][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1074.911718][ T5906] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1074.931209][T18601] bridge_slave_0: entered allmulticast mode [ 1074.940652][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1074.940652][ T6771] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1074.947094][T18633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.956855][T18601] bridge_slave_0: entered promiscuous mode [ 1074.973858][ T5906] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1074.992945][T18601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.000032][T18601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.001610][T18633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.009020][ T6771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1075.032546][ T5906] usb 9-1: USB disconnect, device number 12 [ 1075.056570][T18601] bridge_slave_1: entered allmulticast mode [ 1075.070588][ T6771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1075.096930][T18601] bridge_slave_1: entered promiscuous mode [ 1075.391449][ T964] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1075.488306][T18601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.552011][T18601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.726271][T18149] Bluetooth: hci6: command tx timeout [ 1075.942508][T18664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.971182][T18664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.053968][ T3422] bridge_slave_1: left allmulticast mode [ 1076.059663][ T3422] bridge_slave_1: left promiscuous mode [ 1076.066531][ C0] usblp0: nonzero write bulk status received: -71 [ 1076.076091][T12607] usb 2-1: USB disconnect, device number 16 [ 1076.091300][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.433224][ T3422] bridge_slave_0: left allmulticast mode [ 1076.438914][ T3422] bridge_slave_0: left promiscuous mode [ 1076.460080][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.248448][ T5860] Bluetooth: hci0: command tx timeout [ 1079.070909][ T5860] Bluetooth: hci6: command tx timeout [ 1079.097828][T18632] usblp0: removed [ 1079.294875][T18699] loop1: detected capacity change from 0 to 128 [ 1079.311582][ T5860] Bluetooth: hci0: command 0x041b tx timeout [ 1079.681058][T18699] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1079.911777][T18699] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1079.997552][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.037689][T18699] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.079830][T18708] loop2: detected capacity change from 0 to 7 [ 1080.086977][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.098750][T18708] Dev loop2: unable to read RDB block 7 [ 1080.113856][T18708] loop2: unable to read partition table [ 1080.119679][T18708] loop2: partition table beyond EOD, truncated [ 1080.140362][T18708] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1080.337093][ T3422] bond0 (unregistering): Released all slaves [ 1081.261156][T18149] Bluetooth: hci6: command tx timeout [ 1081.313718][T18601] team0: Port device team_slave_0 added [ 1081.322262][T18601] team0: Port device team_slave_1 added [ 1081.512136][T18149] Bluetooth: hci0: command 0x041b tx timeout [ 1081.646127][T15647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1081.822052][T18703] loop0: detected capacity change from 0 to 40427 [ 1081.883851][T18703] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1081.894054][T18703] F2FS-fs (loop0): Image doesn't support compression [ 1081.900771][T18703] F2FS-fs (loop0): Image doesn't support compression [ 1081.908071][T18703] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 1081.957330][ T3422] hsr_slave_0: left promiscuous mode [ 1081.963441][ T3422] hsr_slave_1: left promiscuous mode [ 1081.969684][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.979211][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.101212][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1082.171218][T18703] F2FS-fs (loop0): invalid crc value [ 1082.500248][T18703] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 1082.656867][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.697040][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.722498][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1082.740258][ T5904] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.775795][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.826500][ T5904] usb 2-1: config 0 descriptor?? [ 1083.565385][ T5860] Bluetooth: hci0: command 0x041b tx timeout [ 1083.591399][ T5904] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1083.598992][ T5904] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1083.617944][ T5904] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1083.639907][ T5904] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1083.722549][ T5904] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1083.794063][ T5904] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1083.871571][ T5904] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1083.935735][ T5904] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1084.025050][ T5904] usb 2-1: USB disconnect, device number 18 [ 1084.104435][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 1084.172333][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 1084.336001][ T5901] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1084.401081][ T964] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1084.501142][ T5901] usb 9-1: Using ep0 maxpacket: 32 [ 1084.513043][ T5901] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1084.541354][ T5901] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1084.562685][ T964] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1084.576991][T18601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.584324][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.598755][T18601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.626434][ T5901] usb 9-1: Product: syz [ 1084.626440][ T964] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1084.630685][ T5901] usb 9-1: Manufacturer: syz [ 1084.657992][ T5901] usb 9-1: SerialNumber: syz [ 1084.665570][T18601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.680781][ T964] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1084.688583][ T5901] usb 9-1: config 0 descriptor?? [ 1084.741162][ T964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1084.806457][T18601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.811219][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.818760][T18742] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1084.829855][T18601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.876084][ T5901] hub 9-1:0.0: bad descriptor, ignoring hub [ 1084.880974][ T964] usb 1-1: Product: syz [ 1084.897741][ T5901] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1084.931651][T18601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.942898][ T964] usb 1-1: Manufacturer: syz [ 1084.942925][ T964] usb 1-1: SerialNumber: syz [ 1085.039032][ T5901] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input7 [ 1085.484812][ T5901] usb 9-1: USB disconnect, device number 13 [ 1085.490955][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1085.502314][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.525384][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.632873][ T5860] Bluetooth: hci0: command 0x041b tx timeout [ 1085.748438][T18601] hsr_slave_0: entered promiscuous mode [ 1085.793021][ T964] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1085.815719][T18601] hsr_slave_1: entered promiscuous mode [ 1085.837613][T18601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.869904][T18601] Cannot create hsr debugfs directory [ 1085.897089][T18642] chnl_net:caif_netlink_parms(): no params data found [ 1086.672995][T18764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.698749][T18764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.796236][ C1] usblp0: nonzero write bulk status received: -71 [ 1086.815949][ T5904] usb 1-1: USB disconnect, device number 7 [ 1087.420090][ T5904] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1087.599447][T18642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.609987][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 1087.622115][ T5904] usb 1-1: config 0 has an invalid interface number: 14 but max is 0 [ 1087.630498][ T5904] usb 1-1: config 0 has no interface number 0 [ 1087.646192][ T5904] usb 1-1: config 0 interface 14 has no altsetting 0 [ 1087.654855][T18642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.669611][ T5904] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=66.ca [ 1087.679199][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.687968][T18642] bridge_slave_0: entered allmulticast mode [ 1087.694245][ T5904] usb 1-1: Product: syz [ 1087.698756][ T5904] usb 1-1: Manufacturer: syz [ 1087.709811][T18642] bridge_slave_0: entered promiscuous mode [ 1087.716659][ T5904] usb 1-1: SerialNumber: syz [ 1087.734992][T18642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.744021][ T5904] usb 1-1: config 0 descriptor?? [ 1087.753645][T18642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.773395][T18642] bridge_slave_1: entered allmulticast mode [ 1087.799360][T18642] bridge_slave_1: entered promiscuous mode [ 1087.962956][T18764] usblp0: removed [ 1088.041100][ T5904] radio-si470x 1-1:0.14: could not find interrupt in endpoint [ 1088.048665][ T5904] radio-si470x 1-1:0.14: probe with driver radio-si470x failed with error -5 [ 1088.058173][ T5904] usbhid 1-1:0.14: couldn't find an input interrupt endpoint [ 1088.103976][ T5904] usb 1-1: USB disconnect, device number 8 [ 1088.314963][T18642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.334005][T18642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.540093][T18809] loop0: detected capacity change from 0 to 1024 [ 1088.574458][T18809] EXT4-fs: inline encryption not supported [ 1088.590621][T18809] EXT4-fs: Ignoring removed orlov option [ 1088.611447][T18809] EXT4-fs: Ignoring removed nobh option [ 1088.631252][ T5904] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1088.649305][T18809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1088.763296][T18809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.811180][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 1088.842999][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1088.862110][T18642] team0: Port device team_slave_0 added [ 1088.899904][ T5904] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1088.916486][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.924908][ T5904] usb 2-1: Product: syz [ 1088.929092][ T5904] usb 2-1: Manufacturer: syz [ 1088.933805][ T5904] usb 2-1: SerialNumber: syz [ 1088.953171][ T5904] usb 2-1: config 0 descriptor?? [ 1088.960008][T18804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1088.977696][ T5904] hub 2-1:0.0: bad descriptor, ignoring hub [ 1088.983775][ T5904] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1088.995239][ T5904] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 1089.212245][T13489] usb 2-1: USB disconnect, device number 19 [ 1089.218585][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1089.303177][T18642] team0: Port device team_slave_1 added [ 1089.401970][T18642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.413669][T18642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.447816][T18642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.463312][T15727] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.487189][T18796] loop8: detected capacity change from 0 to 40427 [ 1089.546473][T18796] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 1089.610449][T18642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.641121][T18796] F2FS-fs (loop8): Image doesn't support compression [ 1089.649144][T18642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.664730][T18796] F2FS-fs (loop8): Image doesn't support compression [ 1089.696762][T18796] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x4 [ 1089.737373][T18642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.789631][T18796] F2FS-fs (loop8): invalid crc value [ 1089.814868][T18796] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1089.973060][T18642] hsr_slave_0: entered promiscuous mode [ 1089.982308][T18642] hsr_slave_1: entered promiscuous mode [ 1089.988704][T18642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.997747][T18642] Cannot create hsr debugfs directory [ 1089.998031][T18796] F2FS-fs (loop8): Start checkpoint disabled! [ 1090.049717][ T3422] bridge_slave_1: left allmulticast mode [ 1090.055734][ T3422] bridge_slave_1: left promiscuous mode [ 1090.062864][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.082952][ T3422] bridge_slave_0: left allmulticast mode [ 1090.088631][ T3422] bridge_slave_0: left promiscuous mode [ 1090.095035][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.105181][T18796] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1091.527094][T18841] syz.8.3110: attempt to access beyond end of device [ 1091.527094][T18841] loop8: rw=2049, sector=77824, nr_sectors = 1976 limit=40427 [ 1091.811403][ T5904] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1092.170580][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1092.170580][ T6771] loop8: rw=1, sector=79800, nr_sectors = 2120 limit=40427 [ 1092.212684][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.218113][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1092.218113][ T6771] loop8: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1093.041304][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1093.041304][ T6771] loop8: rw=1, sector=57344, nr_sectors = 12288 limit=40427 [ 1093.149534][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1093.149534][ T6771] loop8: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 1093.171701][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.184147][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1093.197818][ T5904] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.207217][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.228366][ T5904] usb 1-1: config 0 descriptor?? [ 1093.236446][ T5904] usb 1-1: can't set config #0, error -71 [ 1093.243951][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1093.243951][ T6771] loop8: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 1093.259378][ T5904] usb 1-1: USB disconnect, device number 9 [ 1093.273003][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1093.273003][ T6771] loop8: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 1093.316690][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1093.316690][ T6771] loop8: rw=1, sector=69656, nr_sectors = 8 limit=40427 [ 1093.361080][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1093.361080][ T6771] loop8: rw=1, sector=69664, nr_sectors = 8 limit=40427 [ 1093.423749][ T6771] kworker/u8:10: attempt to access beyond end of device [ 1093.423749][ T6771] loop8: rw=1, sector=69672, nr_sectors = 8 limit=40427 [ 1094.483048][ T6771] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1094.518691][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.579791][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.621720][ T3422] bond0 (unregistering): Released all slaves [ 1095.582938][ T3422] hsr_slave_0: left promiscuous mode [ 1095.589050][ T3422] hsr_slave_1: left promiscuous mode [ 1095.606735][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.687647][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.521714][T13489] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1096.764968][T13489] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1097.678567][T13489] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1097.691925][T13489] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1097.780409][T13489] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1097.790553][T13489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.032087][T13489] usb 2-1: Product: syz [ 1098.036389][T13489] usb 2-1: Manufacturer: syz [ 1098.047519][T13489] usb 2-1: SerialNumber: syz [ 1098.146969][T18878] trusted_key: encrypted_key: insufficient parameters specified [ 1098.901233][T18859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.973613][T18859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.230944][T13489] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1099.749801][T18876] loop0: detected capacity change from 0 to 40427 [ 1099.768929][T18876] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1099.778743][T18876] F2FS-fs (loop0): Image doesn't support compression [ 1099.785547][T18876] F2FS-fs (loop0): Image doesn't support compression [ 1099.793123][T18876] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 1099.817889][T18876] F2FS-fs (loop0): invalid crc value [ 1099.829893][T18876] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1099.940727][T18876] F2FS-fs (loop0): Start checkpoint disabled! [ 1099.980455][T18881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.010557][T18881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.028772][T18876] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1100.073039][ C0] usblp0: nonzero write bulk status received: -71 [ 1100.083519][T12607] usb 2-1: USB disconnect, device number 20 [ 1100.120968][ T964] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1100.279905][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.299494][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.319376][ T964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1100.370147][ T964] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1101.342703][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.353427][ T964] usb 4-1: config 0 descriptor?? [ 1101.401334][T18894] bio_check_eod: 419 callbacks suppressed [ 1101.401359][T18894] syz.0.3127: attempt to access beyond end of device [ 1101.401359][T18894] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 1101.446252][T18894] syz.0.3127: attempt to access beyond end of device [ 1101.446252][T18894] loop0: rw=2049, sector=79872, nr_sectors = 272 limit=40427 [ 1102.099602][T12607] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1102.153384][T18881] usblp0: removed [ 1102.275015][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1102.275064][ T29] audit: type=1326 audit(1731673353.821:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1102.382528][ T964] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1102.390036][ T964] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1102.397937][ T964] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1102.405753][ T964] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1102.415400][ T964] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1102.423194][ T964] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1102.432727][ T964] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1102.691928][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 1102.770339][ T29] audit: type=1326 audit(1731673353.821:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1102.848187][ T964] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1102.869150][ T964] usb 4-1: USB disconnect, device number 38 [ 1102.885487][ T29] audit: type=1326 audit(1731673353.831:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1102.921795][ T29] audit: type=1326 audit(1731673353.831:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1103.037569][ T29] audit: type=1326 audit(1731673353.831:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1103.101005][ T29] audit: type=1326 audit(1731673353.841:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1103.120262][ T12] kworker/u8:1: attempt to access beyond end of device [ 1103.120262][ T12] loop0: rw=1, sector=80144, nr_sectors = 1776 limit=40427 [ 1103.123535][ T29] audit: type=1326 audit(1731673353.841:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1103.172206][ T29] audit: type=1326 audit(1731673353.841:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1103.179546][ T12] kworker/u8:1: attempt to access beyond end of device [ 1103.179546][ T12] loop0: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 1103.197467][ T29] audit: type=1326 audit(1731673353.841:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1103.238077][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 1103.244155][ T12] kworker/u8:1: attempt to access beyond end of device [ 1103.244155][ T12] loop0: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 1103.346482][ T29] audit: type=1326 audit(1731673353.841:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.8.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7ffc0000 [ 1103.372264][ T12] kworker/u8:1: attempt to access beyond end of device [ 1103.372264][ T12] loop0: rw=1, sector=57344, nr_sectors = 4152 limit=40427 [ 1103.485067][ T12] kworker/u8:1: attempt to access beyond end of device [ 1103.485067][ T12] loop0: rw=1, sector=61496, nr_sectors = 5032 limit=40427 [ 1103.524791][ T12] kworker/u8:1: attempt to access beyond end of device [ 1103.524791][ T12] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1103.552454][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1103.559702][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1103.566977][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1103.771465][T13489] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1103.941262][T13489] usb 4-1: Using ep0 maxpacket: 32 [ 1103.956336][T13489] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1103.982664][T13489] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1104.007656][T13489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.016663][T13489] usb 4-1: Product: syz [ 1104.025123][T13489] usb 4-1: Manufacturer: syz [ 1104.029878][T13489] usb 4-1: SerialNumber: syz [ 1104.051611][T13489] usb 4-1: config 0 descriptor?? [ 1104.060618][T18903] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1104.083847][T13489] hub 4-1:0.0: bad descriptor, ignoring hub [ 1104.091559][T13489] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1104.129603][T13489] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 1104.297177][T18908] fuse: Bad value for 'fd' [ 1104.316802][T12607] usb 4-1: USB disconnect, device number 39 [ 1104.316879][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1104.607879][T18601] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1104.788783][T18601] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1104.832130][T18601] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1104.898284][T18601] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1106.356797][T18601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.441309][ T5904] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1106.518577][T18601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.580620][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.587849][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.658194][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.665365][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.792723][ T5904] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1106.811007][ T5904] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1106.840869][ T5904] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1106.864908][ T5904] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1106.935737][T18940] syz.1.3140: attempt to access beyond end of device [ 1106.935737][T18940] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1107.016651][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.261811][ T5904] usb 4-1: Product: syz [ 1107.552394][ T5904] usb 4-1: Manufacturer: syz [ 1107.656695][ T5904] usb 4-1: SerialNumber: syz [ 1107.816883][T18642] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1107.908008][T18642] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1108.010150][T18642] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1108.060737][T18642] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1108.105563][T18919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.125102][T18919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.973547][T18957] loop0: detected capacity change from 0 to 1024 [ 1108.980653][T18957] EXT4-fs: inline encryption not supported [ 1108.999647][T18642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.007026][T18957] EXT4-fs: Ignoring removed orlov option [ 1109.021037][T18957] EXT4-fs: Ignoring removed nobh option [ 1109.026624][T18957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1109.036004][T18642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.330437][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.337632][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.644309][T18964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.667527][T18964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.710445][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.717681][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.816258][T18964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.929168][T18964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.947568][T18957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.042561][T18601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.301817][ T5904] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1110.315172][ T5904] usb 4-1: USB disconnect, device number 40 [ 1110.331847][ T5904] usblp0: removed [ 1110.501979][T15727] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.505425][T18642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.670941][ T5900] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1113.084519][T18978] loop3: detected capacity change from 0 to 40427 [ 1113.350984][T18978] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 1113.359602][T18978] F2FS-fs (loop3): Image doesn't support compression [ 1113.366890][T18978] F2FS-fs (loop3): Image doesn't support compression [ 1113.373966][T18978] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 1113.476192][T18601] veth0_vlan: entered promiscuous mode [ 1113.487467][T18601] veth1_vlan: entered promiscuous mode [ 1113.493472][T18978] F2FS-fs (loop3): invalid crc value [ 1113.529699][T18601] veth0_macvtap: entered promiscuous mode [ 1113.556638][T18601] veth1_macvtap: entered promiscuous mode [ 1113.594512][T18978] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1113.718639][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.718671][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.718690][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.718709][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.718726][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.718744][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.718761][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.718779][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.742995][T18601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.747649][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.747709][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.747727][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.747747][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.747763][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.747782][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.747798][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.747816][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.800878][T18601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.890445][T18601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.890493][T18601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.890760][T18601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.890921][T18601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.075117][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.075159][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.075188][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.075293][ T5900] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.075623][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.453894][ T5900] usb 1-1: config 0 descriptor?? [ 1114.470425][ T5900] usb 1-1: can't set config #0, error -71 [ 1114.500125][ T5900] usb 1-1: USB disconnect, device number 10 [ 1114.548376][T18978] F2FS-fs (loop3): Start checkpoint disabled! [ 1115.321082][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.327408][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.584885][T18642] veth0_vlan: entered promiscuous mode [ 1115.598743][T18642] veth1_vlan: entered promiscuous mode [ 1116.135547][ T7252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.169867][ T7252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.283163][T18642] veth0_macvtap: entered promiscuous mode [ 1116.337210][T18642] veth1_macvtap: entered promiscuous mode [ 1116.371884][ T3422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.407444][ T3422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.458331][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.741017][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.759307][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.839481][T19047] Bluetooth: MGMT ver 1.23 [ 1116.873499][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.964257][T19061] syz.3.3157: attempt to access beyond end of device [ 1116.964257][T19061] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1116.998538][T19061] xt_l2tp: v2 doesn't support IP mode [ 1117.020278][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.066096][T19058] fuse: Bad value for 'fd' [ 1117.191029][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.439293][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.685426][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.719345][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.731730][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.761379][T18642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.937914][T19071] syz.3.3160: attempt to access beyond end of device [ 1117.937914][T19071] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1118.084355][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1118.170145][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.186954][T19076] loop8: detected capacity change from 0 to 128 [ 1118.289304][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1118.328345][T19076] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1118.328733][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.529604][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1118.842859][T19076] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1118.867638][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.898432][T19076] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.952538][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.100591][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.210058][T18642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.258389][T18642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.089054][T18642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.129086][T18642] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.148506][T18642] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.257949][T18642] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.460900][T18642] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.132369][T16275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.637899][T17863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.681536][T17863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.324945][ T8877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.343261][ T8877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.627641][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3169'. [ 1127.581868][T18149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1127.592388][T18149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1127.600210][T18149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1127.608843][T18149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1127.617629][T18149] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1127.625237][T18149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1127.803207][T19162] loop0: detected capacity change from 0 to 512 [ 1128.107433][T19162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1128.193081][T19162] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1128.229524][T19162] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3176: bg 0: block 248: padding at end of block bitmap is not set [ 1128.287444][T19162] __quota_error: 2 callbacks suppressed [ 1128.287492][T19162] Quota error (device loop0): write_blk: dquota write failed [ 1128.301352][T19162] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1128.311504][T19162] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.3176: Failed to acquire dquot type 1 [ 1128.353108][T19162] EXT4-fs (loop0): 1 truncate cleaned up [ 1128.363879][T19162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1128.639369][ T5838] syz_tun (unregistering): left promiscuous mode [ 1128.821595][T15727] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.068091][T18149] Bluetooth: hci2: command tx timeout [ 1130.183243][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.375734][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.110947][ T5860] Bluetooth: hci2: command tx timeout [ 1132.983180][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.144049][T19152] chnl_net:caif_netlink_parms(): no params data found [ 1134.231162][ T5860] Bluetooth: hci2: command tx timeout [ 1136.001359][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1136.371406][T18149] Bluetooth: hci2: command tx timeout [ 1137.301187][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.651046][T18149] Bluetooth: hci2: command 0x0405 tx timeout [ 1139.067687][T19152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.082570][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.112674][T19152] bridge_slave_0: entered allmulticast mode [ 1139.152053][T19152] bridge_slave_0: entered promiscuous mode [ 1139.211112][ T5951] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1139.224001][T19152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.254102][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.278853][T19152] bridge_slave_1: entered allmulticast mode [ 1139.301471][T19152] bridge_slave_1: entered promiscuous mode [ 1139.360924][ T2137] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1139.395578][ T5951] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1139.429640][ T5951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.476368][ T5951] usb 8-1: Product: syz [ 1139.498481][ T5951] usb 8-1: Manufacturer: syz [ 1139.531294][ T5951] usb 8-1: SerialNumber: syz [ 1139.543595][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.558742][ T2137] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1139.574781][ T5951] usb 8-1: config 0 descriptor?? [ 1139.581889][ T2137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.592562][ T81] team0: left allmulticast mode [ 1139.597442][ T81] team_slave_0: left allmulticast mode [ 1139.617859][ T2137] usb 2-1: Product: syz [ 1139.635794][ T81] team_slave_1: left allmulticast mode [ 1139.651174][ T2137] usb 2-1: Manufacturer: syz [ 1139.662513][ T81] team0: left promiscuous mode [ 1139.683045][ T2137] usb 2-1: SerialNumber: syz [ 1139.699793][ T81] team_slave_0: left promiscuous mode [ 1139.738960][ T2137] usb 2-1: config 0 descriptor?? [ 1139.744347][ T81] team_slave_1: left promiscuous mode [ 1139.763934][ T81] bridge0: port 3(team0) entered disabled state [ 1139.816846][ T5951] hso 8-1:0.0: Failed to find BULK IN ep [ 1139.825370][ T81] bridge_slave_1: left allmulticast mode [ 1139.852209][ T5951] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1139.874446][ T81] bridge_slave_1: left promiscuous mode [ 1139.880173][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.976999][ T2137] hso 2-1:0.0: Failed to find BULK IN ep [ 1139.985174][ T81] bridge_slave_0: left allmulticast mode [ 1140.027896][ T5951] usb 8-1: USB disconnect, device number 4 [ 1140.056729][ T81] bridge_slave_0: left promiscuous mode [ 1140.066503][ T2137] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1140.081653][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.142285][ T81] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1140.224536][ T2137] usb 2-1: USB disconnect, device number 22 [ 1141.109854][T19298] loop7: detected capacity change from 0 to 128 [ 1141.119244][ T81] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1141.134118][T19298] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1141.346085][T19298] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1141.478829][T19298] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.731082][ T29] audit: type=1326 audit(1731673393.271:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1141.802689][ T29] audit: type=1326 audit(1731673393.381:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1142.917705][T19314] loop1: detected capacity change from 0 to 256 [ 1143.588722][ T29] audit: type=1326 audit(1731673393.401:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1143.611795][ T29] audit: type=1326 audit(1731673393.401:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1143.655305][ T29] audit: type=1326 audit(1731673393.401:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1143.700597][ T29] audit: type=1326 audit(1731673393.401:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1143.836071][ T29] audit: type=1326 audit(1731673393.401:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1143.916526][ T29] audit: type=1326 audit(1731673393.401:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1144.136945][ T29] audit: type=1326 audit(1731673393.401:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1144.241082][ T29] audit: type=1326 audit(1731673393.401:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.8.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1237e719 code=0x7fc00000 [ 1145.468817][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.620124][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.838222][ T81] bond0 (unregistering): Released all slaves [ 1146.160763][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.339929][T18642] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1147.677085][T19152] team0: Port device team_slave_0 added [ 1147.996527][T19152] team0: Port device team_slave_1 added [ 1151.336254][T19376] loop0: detected capacity change from 0 to 40427 [ 1151.560984][T19376] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1151.569458][T19376] F2FS-fs (loop0): Image doesn't support compression [ 1151.576515][T19376] F2FS-fs (loop0): Image doesn't support compression [ 1151.578642][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.583330][T19376] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 1152.384962][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.510281][T19376] F2FS-fs (loop0): invalid crc value [ 1152.554450][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.686940][T19376] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1153.434672][T19400] misc userio: No port type given on /dev/userio [ 1153.578990][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.702018][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.731621][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.181017][T19376] F2FS-fs (loop0): Start checkpoint disabled! [ 1154.440265][ T81] hsr_slave_0: left promiscuous mode [ 1154.614978][ T81] hsr_slave_1: left promiscuous mode [ 1154.632607][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.660378][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.737081][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.763333][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.949710][ T81] veth1_macvtap: left promiscuous mode [ 1155.053842][T19419] loop7: detected capacity change from 0 to 256 [ 1155.171009][ T81] veth0_macvtap: left promiscuous mode [ 1155.212492][ T81] veth1_vlan: left promiscuous mode [ 1155.320067][ T81] veth0_vlan: left promiscuous mode [ 1160.143525][T19472] syz.1.3244: attempt to access beyond end of device [ 1160.143525][T19472] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1160.227492][T19474] xt_l2tp: v2 doesn't support IP mode [ 1163.907045][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1164.074792][T19479] loop1: detected capacity change from 0 to 40427 [ 1164.108438][T19479] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 1164.125998][T19479] F2FS-fs (loop1): Image doesn't support compression [ 1164.167044][T19479] F2FS-fs (loop1): Image doesn't support compression [ 1164.183352][T19479] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 1164.265690][T19479] F2FS-fs (loop1): invalid crc value [ 1164.299011][T19479] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 1164.352482][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1169.738760][T19152] hsr_slave_0: entered promiscuous mode [ 1169.754597][T19152] hsr_slave_1: entered promiscuous mode [ 1169.775101][T19152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.789466][T19152] Cannot create hsr debugfs directory [ 1170.060958][T12607] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1170.205396][T12607] usb 8-1: device descriptor read/64, error -71 [ 1170.484162][T12607] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1170.631294][T12607] usb 8-1: device descriptor read/64, error -71 [ 1170.781615][T12607] usb usb8-port1: attempt power cycle [ 1171.451155][T12607] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1171.472138][T12607] usb 8-1: device descriptor read/8, error -71 [ 1171.750502][T12607] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1172.453095][T19562] misc userio: No port type given on /dev/userio [ 1172.481597][T12607] usb 8-1: device descriptor read/8, error -71 [ 1172.514708][T19563] loop5: detected capacity change from 0 to 128 [ 1172.548083][T19563] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1172.641357][T12607] usb usb8-port1: unable to enumerate USB device [ 1172.682858][T19563] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1172.717917][T19563] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.925540][T18601] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1174.117494][T19152] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1174.844706][T19152] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1175.242083][T19152] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1175.462993][T19595] overlayfs: overlapping lowerdir path [ 1176.014804][T19152] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1176.663820][T19152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.701832][T19152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.765914][T19152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1176.790834][T19152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.870027][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.877006][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.037716][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.045015][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.053890][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.061030][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.989098][T19619] loop7: detected capacity change from 0 to 40427 [ 1178.018511][T19619] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 1178.027816][T19619] F2FS-fs (loop7): Image doesn't support compression [ 1178.375563][T19619] F2FS-fs (loop7): Image doesn't support compression [ 1178.382499][T19619] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x4 [ 1179.380885][ T5860] Bluetooth: hci2: command 0x0405 tx timeout [ 1179.445581][T19632] loop0: detected capacity change from 0 to 256 [ 1179.712502][ T47] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1180.120956][ T47] usb 9-1: device descriptor read/64, error -71 [ 1180.299018][T19152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.331600][T19619] F2FS-fs (loop7): invalid crc value [ 1180.391708][ T47] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1180.421374][T19619] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1180.783076][ T47] usb 9-1: device descriptor read/64, error -71 [ 1180.795492][T19152] veth0_vlan: entered promiscuous mode [ 1180.808366][T19152] veth1_vlan: entered promiscuous mode [ 1180.849759][T19619] F2FS-fs (loop7): Start checkpoint disabled! [ 1180.903106][ T47] usb usb9-port1: attempt power cycle [ 1180.931829][T19644] xt_l2tp: v2 doesn't support IP mode [ 1180.979856][T19152] veth0_macvtap: entered promiscuous mode [ 1181.511830][ T47] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1181.718422][T19152] veth1_macvtap: entered promiscuous mode [ 1181.830457][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.921116][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.970868][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.014479][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.077004][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.168595][ T47] usb 9-1: device not accepting address 16, error -71 [ 1182.176675][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.187195][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.197709][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.207960][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.218484][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.231477][T19152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.311261][T19660] overlayfs: overlapping lowerdir path [ 1183.079862][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.090479][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.143496][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.184108][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.210542][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.232816][T19671] misc userio: No port type given on /dev/userio [ 1183.279907][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.346061][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.388649][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.399260][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.417754][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.430099][T19152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.441030][T19152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.453649][T19152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.466790][T19152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.208701][T19152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.311247][T19670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3289'. [ 1184.801926][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1185.729030][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1185.881090][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1186.286004][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1186.442242][ T5860] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1186.452158][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1187.442595][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.595044][ T5860] Bluetooth: hci1: command tx timeout [ 1188.837958][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.260574][T19713] loop0: detected capacity change from 0 to 40427 [ 1190.297788][T19713] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1190.368780][T19713] F2FS-fs (loop0): Image doesn't support compression [ 1190.481655][T19713] F2FS-fs (loop0): Image doesn't support compression [ 1190.488483][T19713] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 1190.662195][T19713] F2FS-fs (loop0): invalid crc value [ 1190.708930][T19713] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1190.734834][T18149] Bluetooth: hci1: command tx timeout [ 1190.748624][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.680286][T19713] F2FS-fs (loop0): Start checkpoint disabled! [ 1192.771585][ T5860] Bluetooth: hci1: command tx timeout [ 1192.839233][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.946005][T19683] chnl_net:caif_netlink_parms(): no params data found [ 1194.284185][ T5860] Bluetooth: hci6: command 0x0406 tx timeout [ 1194.862867][ T5860] Bluetooth: hci1: command tx timeout [ 1195.177900][T19683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.192565][T19683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.252557][T19683] bridge_slave_0: entered allmulticast mode [ 1195.259718][T19683] bridge_slave_0: entered promiscuous mode [ 1195.320897][ T8] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1195.453184][T19683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.501588][T19683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.508926][T19683] bridge_slave_1: entered allmulticast mode [ 1195.629166][T19683] bridge_slave_1: entered promiscuous mode [ 1195.680960][ T8] usb 8-1: device descriptor read/64, error -71 [ 1196.201055][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1196.348198][ T8] usb 8-1: device descriptor read/64, error -71 [ 1196.611077][ T8] usb usb8-port1: attempt power cycle [ 1197.001115][ T8] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1197.150087][T19683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.274276][ T8] usb 8-1: device descriptor read/8, error -71 [ 1197.278878][T19683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.922288][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1198.151060][ T8] usb 8-1: device not accepting address 12, error -71 [ 1198.151637][ T8] usb usb8-port1: unable to enumerate USB device [ 1198.727447][T19683] team0: Port device team_slave_0 added [ 1198.789679][T19683] team0: Port device team_slave_1 added [ 1198.932841][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1198.932864][ T29] audit: type=1326 audit(1731673450.491:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1198.961275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.972811][ T29] audit: type=1326 audit(1731673450.491:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1198.995135][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.001735][ T29] audit: type=1326 audit(1731673450.501:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1199.024058][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.031674][ T29] audit: type=1326 audit(1731673450.501:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1199.054389][ T29] audit: type=1326 audit(1731673450.501:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1199.076822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.305005][ T29] audit: type=1326 audit(1731673450.501:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1199.327579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.335494][ T29] audit: type=1326 audit(1731673450.501:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1199.357854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.365955][ T29] audit: type=1326 audit(1731673450.501:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1200.323703][ T5860] Bluetooth: hci0: command 0x041b tx timeout [ 1200.359551][ T29] audit: type=1326 audit(1731673450.501:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1200.554443][ T29] audit: type=1326 audit(1731673450.501:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.5.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edf7e719 code=0x7fc00000 [ 1200.571505][T19683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.616168][T19683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.642988][T19683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.656860][T19683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.664653][T19683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.990818][T19683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.854021][ T62] bridge_slave_1: left allmulticast mode [ 1201.860923][ T62] bridge_slave_1: left promiscuous mode [ 1201.866658][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.041566][ T62] bridge_slave_0: left allmulticast mode [ 1202.047272][ T62] bridge_slave_0: left promiscuous mode [ 1202.079723][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.130969][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1202.243641][T19893] loop1: detected capacity change from 0 to 128 [ 1202.301055][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1202.331137][T19893] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1202.338736][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1202.408908][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1202.670930][T19893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1203.147254][T19893] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.236520][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1203.246587][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1203.260098][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1203.269494][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.490609][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 1203.500373][ T8] usbtmc 1-1:16.0: can't read capabilities [ 1204.201752][ T8] usb 1-1: USB disconnect, device number 11 [ 1206.577630][ T5860] Bluetooth: hci1: command 0x0405 tx timeout [ 1207.132841][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.405230][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.562497][ T62] bond0 (unregistering): Released all slaves [ 1207.708537][T19683] hsr_slave_0: entered promiscuous mode [ 1207.975573][T19683] hsr_slave_1: entered promiscuous mode [ 1209.674855][T15647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1209.685942][T19683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1209.951227][T19683] Cannot create hsr debugfs directory [ 1210.020683][T19958] syz.0.3344 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1210.274970][ T62] hsr_slave_0: left promiscuous mode [ 1211.999527][ T62] hsr_slave_1: left promiscuous mode [ 1212.882016][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.882070][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.891692][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1212.891735][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.918310][T19974] loop8: detected capacity change from 0 to 128 [ 1212.951017][T19974] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1213.046811][ T62] veth1_macvtap: left promiscuous mode [ 1213.052461][ T62] veth0_macvtap: left promiscuous mode [ 1213.060020][ T62] veth1_vlan: left promiscuous mode [ 1213.065514][ T62] veth0_vlan: left promiscuous mode [ 1213.418134][T19974] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1213.527572][T19974] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.406744][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1218.528610][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1220.534402][T16275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1226.161359][T20076] syz.8.3369: attempt to access beyond end of device [ 1226.161359][T20076] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1226.243079][T20077] xt_l2tp: v2 doesn't support IP mode [ 1232.281534][T19683] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1232.666883][T19683] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1232.762448][T19683] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1232.851359][T19683] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1233.301481][T20138] loop1: detected capacity change from 0 to 256 [ 1233.319859][T19683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.341936][T19683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.363525][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.370674][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.555825][T19683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1233.566685][T19683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1233.611378][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.618504][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.716200][T19683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.237416][T19683] veth0_vlan: entered promiscuous mode [ 1235.248602][T19683] veth1_vlan: entered promiscuous mode [ 1235.473570][T19683] veth0_macvtap: entered promiscuous mode [ 1236.004190][T19683] veth1_macvtap: entered promiscuous mode [ 1236.020502][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.031149][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.041045][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.051627][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.061571][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.072097][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.081984][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.093195][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.103736][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.114379][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.126138][T19683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.156956][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.241179][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.253562][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.271743][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.283299][T20179] syz.8.3390: attempt to access beyond end of device [ 1236.283299][T20179] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1236.308030][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.386263][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.396745][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.408511][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.418388][T19683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.428899][T19683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.440146][T19683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.450117][T19683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.458950][T19683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.467699][T19683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.476534][T19683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.848446][T17863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.856553][T17863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.864627][T17863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.872517][T17863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.891209][T20168] loop7: detected capacity change from 0 to 40427 [ 1236.913617][T20168] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 1236.927135][T20168] F2FS-fs (loop7): Image doesn't support compression [ 1237.019990][T20168] F2FS-fs (loop7): Image doesn't support compression [ 1237.087941][T20168] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x4 [ 1237.280314][T20195] misc userio: No port type given on /dev/userio [ 1237.361826][T20168] F2FS-fs (loop7): invalid crc value [ 1237.424487][T20168] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1238.544201][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.550547][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.553821][T20168] F2FS-fs (loop7): Start checkpoint disabled! [ 1240.042960][T20227] overlayfs: failed to resolve './file2': -2 [ 1242.090325][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1242.230850][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1242.392059][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1242.530890][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1242.540183][ T5860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1242.547608][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1244.396127][T20268] trusted_key: syz.5.3409 sent an empty control message without MSG_MORE. [ 1244.936882][T20268] loop2: detected capacity change from 0 to 7 [ 1244.969218][T20268] Dev loop2: unable to read RDB block 7 [ 1245.020585][T20268] loop2: unable to read partition table [ 1245.209034][T18149] Bluetooth: hci2: command tx timeout [ 1245.210849][T20268] loop2: partition table beyond EOD, truncated [ 1245.417354][T20268] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1247.421537][ T5860] Bluetooth: hci2: command tx timeout [ 1249.681224][ T5860] Bluetooth: hci2: command tx timeout [ 1251.815285][ T5860] Bluetooth: hci2: command tx timeout [ 1252.448982][ T3422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.515332][ T3422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.817506][T20341] syz.5.3424: attempt to access beyond end of device [ 1252.817506][T20341] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1253.009589][T20346] overlayfs: overlapping lowerdir path [ 1253.749984][ T3422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1253.765707][ T47] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1253.792838][ T3422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.026998][ T47] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1255.037451][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.046372][ T47] usb 2-1: Product: syz [ 1255.050554][ T47] usb 2-1: Manufacturer: syz [ 1255.055393][ T47] usb 2-1: SerialNumber: syz [ 1255.176112][ T47] usb 2-1: config 0 descriptor?? [ 1255.575611][ T47] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1256.168364][ T47] usb 2-1: USB disconnect, device number 23 [ 1256.185896][ T3422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.021541][ T3422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.575974][T20390] loop5: detected capacity change from 0 to 256 [ 1259.030854][T20390] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1259.209454][ T3422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1259.209544][ T3422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.716684][T20235] chnl_net:caif_netlink_parms(): no params data found [ 1263.563180][T20235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.570392][T20235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.577781][T20235] bridge_slave_0: entered allmulticast mode [ 1265.353585][T20235] bridge_slave_0: entered promiscuous mode [ 1265.361736][T20235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.541431][T20235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.587091][T20235] bridge_slave_1: entered allmulticast mode [ 1265.650426][T20235] bridge_slave_1: entered promiscuous mode [ 1266.903313][T20235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.015225][T20235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.030942][ T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1268.225746][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1268.235699][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.446719][ T8] usb 4-1: Product: syz [ 1268.452063][ T8] usb 4-1: Manufacturer: syz [ 1268.456681][ T8] usb 4-1: SerialNumber: syz [ 1268.464741][ T8] usb 4-1: config 0 descriptor?? [ 1268.496132][T20235] team0: Port device team_slave_0 added [ 1269.228440][T20235] team0: Port device team_slave_1 added [ 1269.241485][ T8] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1269.653979][ T8] usb 4-1: USB disconnect, device number 41 [ 1269.670186][T20472] syz.8.3453: attempt to access beyond end of device [ 1269.670186][T20472] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1269.751478][ T3422] bridge_slave_1: left allmulticast mode [ 1269.777928][T20473] misc userio: No port type given on /dev/userio [ 1269.787510][ T3422] bridge_slave_1: left promiscuous mode [ 1269.838001][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.924775][ T3422] bridge_slave_0: left allmulticast mode [ 1269.952664][ T3422] bridge_slave_0: left promiscuous mode [ 1270.004133][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.278102][T20478] syz.7.3454: attempt to access beyond end of device [ 1270.278102][T20478] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1270.298464][T20478] xt_l2tp: v2 doesn't support IP mode [ 1271.113106][T20486] syz.3.3456: attempt to access beyond end of device [ 1271.113106][T20486] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1271.129336][T20486] xt_l2tp: v2 doesn't support IP mode [ 1272.567400][T20495] loop7: detected capacity change from 0 to 256 [ 1273.306039][T20495] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1277.576276][T20525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1279.069862][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1279.081790][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1279.095745][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1279.130852][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1279.148924][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1279.164530][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1279.251162][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.271256][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.291787][ T3422] bond0 (unregistering): Released all slaves [ 1279.307094][T20235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.314643][T20235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.341588][T20235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.347318][T20235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.380079][T20235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.570843][T20235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.270965][ T5844] Bluetooth: hci5: command tx timeout [ 1283.105753][T20235] hsr_slave_0: entered promiscuous mode [ 1283.161436][T20235] hsr_slave_1: entered promiscuous mode [ 1283.217957][T20235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1283.246642][T20235] Cannot create hsr debugfs directory [ 1283.343673][ T5844] Bluetooth: hci5: command tx timeout [ 1284.357614][ T3422] hsr_slave_0: left promiscuous mode [ 1284.364760][ T3422] hsr_slave_1: left promiscuous mode [ 1284.704216][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.704288][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.705665][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.705714][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.731746][T20564] loop5: detected capacity change from 0 to 40427 [ 1284.735142][ T3422] veth1_macvtap: left promiscuous mode [ 1284.735213][ T3422] veth0_macvtap: left promiscuous mode [ 1284.735348][ T3422] veth1_vlan: left promiscuous mode [ 1284.735445][ T3422] veth0_vlan: left promiscuous mode [ 1284.829337][T20564] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 1284.859489][T20564] F2FS-fs (loop5): Image doesn't support compression [ 1284.872827][T20564] F2FS-fs (loop5): Image doesn't support compression [ 1284.882054][T20564] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 1285.009970][T20571] syz.3.3477: attempt to access beyond end of device [ 1285.009970][T20571] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1285.084689][T20564] F2FS-fs (loop5): invalid crc value [ 1285.118674][T20564] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1285.342013][T20564] F2FS-fs (loop5): Start checkpoint disabled! [ 1285.597758][ T5844] Bluetooth: hci5: command tx timeout [ 1285.617572][T20564] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1288.018013][ T5844] Bluetooth: hci5: command tx timeout [ 1289.017133][T20621] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1289.097995][T20622] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1291.462301][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 1291.532674][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 1292.409215][T20643] ------------[ cut here ]------------ [ 1292.409281][T20643] WARNING: CPU: 0 PID: 20643 at drivers/gpu/drm/vkms/vkms_crtc.c:100 vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.409327][T20643] Modules linked in: [ 1292.409347][T20643] CPU: 0 UID: 0 PID: 20643 Comm: syz.3.3492 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1292.409373][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1292.409389][T20643] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.409419][T20643] Code: 42 80 3c 30 00 74 08 48 89 ef e8 a8 85 09 fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e ff fa 05 e8 3e a8 9f fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 1292.409439][T20643] RSP: 0018:ffffc900041d72a8 EFLAGS: 00010287 [ 1292.409463][T20643] RAX: ffffffff85f541d2 RBX: 0000012ce845463f RCX: 0000000000040000 [ 1292.409481][T20643] RDX: ffffc90012659000 RSI: 000000000000c8a9 RDI: 000000000000c8aa [ 1292.409498][T20643] RBP: ffffc900041d7440 R08: ffffffff85f5413f R09: 1ffff1100d9ad6a2 [ 1292.409517][T20643] R10: dffffc0000000000 R11: ffffffff85f54050 R12: 0000012ce845463f [ 1292.409536][T20643] R13: ffff8881423e8150 R14: 1ffff9200083ae88 R15: ffff88802511c000 [ 1292.409557][T20643] FS: 00007f0df55096c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1292.409578][T20643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1292.409595][T20643] CR2: 000000110c2c5911 CR3: 000000006ddfa000 CR4: 0000000000350ef0 [ 1292.409614][T20643] Call Trace: [ 1292.409624][T20643] [ 1292.409636][T20643] ? __warn+0x168/0x4e0 [ 1292.409661][T20643] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.409696][T20643] ? report_bug+0x2b3/0x500 [ 1292.409722][T20643] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.409756][T20643] ? handle_bug+0x60/0x90 [ 1292.409787][T20643] ? exc_invalid_op+0x1a/0x50 [ 1292.409818][T20643] ? asm_exc_invalid_op+0x1a/0x20 [ 1292.409850][T20643] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1292.409879][T20643] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 1292.409907][T20643] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1292.409943][T20643] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.409974][T20643] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1292.410002][T20643] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1292.410033][T20643] drm_crtc_next_vblank_start+0x22b/0x490 [ 1292.410062][T20643] ? lockdep_hardirqs_on+0x99/0x150 [ 1292.410094][T20643] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1292.410122][T20643] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 1292.410156][T20643] drm_atomic_helper_wait_for_fences+0x277/0x8e0 [ 1292.410187][T20643] ? irqentry_exit+0x63/0x90 [ 1292.410213][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.410252][T20643] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1292.410283][T20643] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 1292.410308][T20643] ? drm_atomic_helper_commit+0x196/0x9f0 [ 1292.410346][T20643] drm_atomic_helper_commit+0x53a/0x9f0 [ 1292.410379][T20643] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1292.410413][T20643] drm_atomic_commit+0x298/0x2f0 [ 1292.410444][T20643] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1292.410471][T20643] ? __pfx___drm_printfn_info+0x10/0x10 [ 1292.410500][T20643] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 1292.410532][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.410571][T20643] drm_client_modeset_commit_atomic+0x676/0x7e0 [ 1292.410607][T20643] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1292.410663][T20643] drm_client_modeset_commit_locked+0xe0/0x520 [ 1292.410697][T20643] drm_fb_helper_pan_display+0x379/0xc10 [ 1292.411054][T20643] ? irqentry_exit+0x63/0x90 [ 1292.411092][T20643] fb_pan_display+0x3a5/0x680 [ 1292.411117][T20643] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1292.411154][T20643] bit_update_start+0x4d/0x1c0 [ 1292.411184][T20643] fbcon_switch+0x144d/0x2250 [ 1292.411219][T20643] ? __pfx_fbcon_switch+0x10/0x10 [ 1292.411257][T20643] ? set_origin+0x101/0x480 [ 1292.411286][T20643] ? set_origin+0x16c/0x480 [ 1292.411312][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.411341][T20643] ? set_origin+0x344/0x480 [ 1292.411370][T20643] redraw_screen+0x548/0xe90 [ 1292.411395][T20643] ? fbcon_set_palette+0x5e9/0x6f0 [ 1292.411423][T20643] ? fbcon_modechanged+0xb8c/0x1200 [ 1292.411457][T20643] ? __pfx_redraw_screen+0x10/0x10 [ 1292.411493][T20643] do_fb_ioctl+0x71b/0x7b0 [ 1292.411526][T20643] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1292.411589][T20643] ? __fget_files+0x29/0x470 [ 1292.411627][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.411658][T20643] ? __pfx_fb_ioctl+0x10/0x10 [ 1292.411689][T20643] __se_sys_ioctl+0xfb/0x170 [ 1292.411715][T20643] do_syscall_64+0xf3/0x230 [ 1292.411744][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.411777][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.411804][T20643] RIP: 0033:0x7f0df477e719 [ 1292.411825][T20643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.411845][T20643] RSP: 002b:00007f0df5509038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.411872][T20643] RAX: ffffffffffffffda RBX: 00007f0df4936058 RCX: 00007f0df477e719 [ 1292.411890][T20643] RDX: 0000000020000100 RSI: 0000000000004601 RDI: 0000000000000008 [ 1292.411906][T20643] RBP: 00007f0df47f175e R08: 0000000000000000 R09: 0000000000000000 [ 1292.411922][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.411942][T20643] R13: 0000000000000000 R14: 00007f0df4936058 R15: 00007ffcc82c8728 [ 1292.411975][T20643] [ 1292.411988][T20643] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1292.412000][T20643] CPU: 0 UID: 0 PID: 20643 Comm: syz.3.3492 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1292.412023][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1292.412036][T20643] Call Trace: [ 1292.412044][T20643] [ 1292.412053][T20643] dump_stack_lvl+0x241/0x360 [ 1292.412084][T20643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1292.412113][T20643] ? __pfx__printk+0x10/0x10 [ 1292.412145][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.412173][T20643] ? vscnprintf+0x5d/0x90 [ 1292.412206][T20643] panic+0x349/0x880 [ 1292.412230][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.412260][T20643] ? __warn+0x177/0x4e0 [ 1292.412283][T20643] ? __pfx_panic+0x10/0x10 [ 1292.412326][T20643] __warn+0x34b/0x4e0 [ 1292.412347][T20643] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.412378][T20643] report_bug+0x2b3/0x500 [ 1292.412400][T20643] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.412433][T20643] handle_bug+0x60/0x90 [ 1292.412460][T20643] exc_invalid_op+0x1a/0x50 [ 1292.412489][T20643] asm_exc_invalid_op+0x1a/0x20 [ 1292.412514][T20643] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 1292.412541][T20643] Code: 42 80 3c 30 00 74 08 48 89 ef e8 a8 85 09 fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e ff fa 05 e8 3e a8 9f fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 1292.412558][T20643] RSP: 0018:ffffc900041d72a8 EFLAGS: 00010287 [ 1292.412576][T20643] RAX: ffffffff85f541d2 RBX: 0000012ce845463f RCX: 0000000000040000 [ 1292.412592][T20643] RDX: ffffc90012659000 RSI: 000000000000c8a9 RDI: 000000000000c8aa [ 1292.412607][T20643] RBP: ffffc900041d7440 R08: ffffffff85f5413f R09: 1ffff1100d9ad6a2 [ 1292.412624][T20643] R10: dffffc0000000000 R11: ffffffff85f54050 R12: 0000012ce845463f [ 1292.412640][T20643] R13: ffff8881423e8150 R14: 1ffff9200083ae88 R15: ffff88802511c000 [ 1292.412661][T20643] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1292.412689][T20643] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 1292.412715][T20643] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1292.412747][T20643] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1292.412777][T20643] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1292.412806][T20643] drm_crtc_next_vblank_start+0x22b/0x490 [ 1292.412830][T20643] ? lockdep_hardirqs_on+0x99/0x150 [ 1292.412860][T20643] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1292.412887][T20643] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 1292.412918][T20643] drm_atomic_helper_wait_for_fences+0x277/0x8e0 [ 1292.412950][T20643] ? irqentry_exit+0x63/0x90 [ 1292.412973][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.413010][T20643] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1292.413037][T20643] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 1292.413061][T20643] ? drm_atomic_helper_commit+0x196/0x9f0 [ 1292.413097][T20643] drm_atomic_helper_commit+0x53a/0x9f0 [ 1292.413128][T20643] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1292.413159][T20643] drm_atomic_commit+0x298/0x2f0 [ 1292.413187][T20643] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1292.413212][T20643] ? __pfx___drm_printfn_info+0x10/0x10 [ 1292.413239][T20643] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 1292.413268][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.413304][T20643] drm_client_modeset_commit_atomic+0x676/0x7e0 [ 1292.413338][T20643] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1292.413391][T20643] drm_client_modeset_commit_locked+0xe0/0x520 [ 1292.413421][T20643] drm_fb_helper_pan_display+0x379/0xc10 [ 1292.413453][T20643] ? irqentry_exit+0x63/0x90 [ 1292.413485][T20643] fb_pan_display+0x3a5/0x680 [ 1292.413507][T20643] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1292.413542][T20643] bit_update_start+0x4d/0x1c0 [ 1292.413569][T20643] fbcon_switch+0x144d/0x2250 [ 1292.413603][T20643] ? __pfx_fbcon_switch+0x10/0x10 [ 1292.413639][T20643] ? set_origin+0x101/0x480 [ 1292.413665][T20643] ? set_origin+0x16c/0x480 [ 1292.413690][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.413718][T20643] ? set_origin+0x344/0x480 [ 1292.413745][T20643] redraw_screen+0x548/0xe90 [ 1292.413769][T20643] ? fbcon_set_palette+0x5e9/0x6f0 [ 1292.413796][T20643] ? fbcon_modechanged+0xb8c/0x1200 [ 1292.413828][T20643] ? __pfx_redraw_screen+0x10/0x10 [ 1292.413863][T20643] do_fb_ioctl+0x71b/0x7b0 [ 1292.413893][T20643] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1292.413960][T20643] ? __fget_files+0x29/0x470 [ 1292.413995][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.414024][T20643] ? __pfx_fb_ioctl+0x10/0x10 [ 1292.414053][T20643] __se_sys_ioctl+0xfb/0x170 [ 1292.414076][T20643] do_syscall_64+0xf3/0x230 [ 1292.414103][T20643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.414135][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.414160][T20643] RIP: 0033:0x7f0df477e719 [ 1292.414177][T20643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.414195][T20643] RSP: 002b:00007f0df5509038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.414217][T20643] RAX: ffffffffffffffda RBX: 00007f0df4936058 RCX: 00007f0df477e719 [ 1292.414233][T20643] RDX: 0000000020000100 RSI: 0000000000004601 RDI: 0000000000000008 [ 1292.414248][T20643] RBP: 00007f0df47f175e R08: 0000000000000000 R09: 0000000000000000 [ 1292.414262][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.414276][T20643] R13: 0000000000000000 R14: 00007f0df4936058 R15: 00007ffcc82c8728 [ 1292.414306][T20643] [ 1292.414574][T20643] Kernel Offset: disabled