last executing test programs: 8m37.639257293s ago: executing program 32 (id=11): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x8, 0x1) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0xb30cd3a6838594b8, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m53.642286995s ago: executing program 33 (id=133): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x8, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') chdir(0x0) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7c, 0x0, 0x40}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) getdents64(0xffffffffffffffff, &(0x7f0000002080)=""/4105, 0x1009) 6m19.931468279s ago: executing program 34 (id=194): socket(0x22, 0x2, 0x1) 5m37.462103975s ago: executing program 5 (id=309): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 5m37.342973304s ago: executing program 5 (id=310): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0xa, 0xfffffffffffffff8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0xe}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 5m37.005148167s ago: executing program 5 (id=311): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f00000007c0)=@usbdevfs_disconnect={0x100}) 5m36.746671661s ago: executing program 5 (id=312): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1400c, &(0x7f0000000080)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47a, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m36.077950673s ago: executing program 5 (id=315): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="40140d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5m35.358568849s ago: executing program 4 (id=316): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 5m35.044838176s ago: executing program 4 (id=317): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") open(&(0x7f00000003c0)='./file2\x00', 0x842200, 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 5m34.650492415s ago: executing program 4 (id=318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x2c, r1, 0x6a98047402e98331, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x2c}, 0x1, 0x4000}, 0x4004) 5m34.549663286s ago: executing program 5 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e4"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 5m34.182746281s ago: executing program 35 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e4"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 5m34.176619094s ago: executing program 4 (id=321): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000200)=[{0x2000000000000006, 0xffffffff, 0x1}, {0x4, 0x17997, 0x7}], 0x2, 0xc2ff, 0x0, 0x20, 0x0, 0x76}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x3, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf540000000000000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) write(r4, &(0x7f0000000280), 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000440), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m32.293851889s ago: executing program 4 (id=327): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 5m30.963361522s ago: executing program 4 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_uring_setup(0x63ad, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m15.876842543s ago: executing program 36 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_uring_setup(0x63ad, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m40.042102651s ago: executing program 2 (id=434): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000d40)={0x2, 0x0, {&(0x7f0000000ac0)=""/116, 0x74, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 4m39.832188422s ago: executing program 2 (id=435): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) ftruncate(r0, 0x2) sync_file_range(r0, 0x889, 0x8, 0x2) 4m39.410988941s ago: executing program 2 (id=437): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40503, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xfe, "d610d11be011ef8af5e995d00a29ccbe3b13e0c8d149fc50465aa2a9f5053740723ec13f32bb2e41ba58a7fd9e457cfe72f1e86656c6319f2f76f192355ae91b836a05d8386880651fc6bb1f614340abfd05854ac876f732a2c05727f936cda6f0964839e8fb7b07540d18348b9920a52f7f05253733859c32091a56e6d0cc025bc915f1c76f68e81430143cab23d33aedc3b1ba28853fde14b6c7f08393718d9307adb2efcc4b360b14c9376c77e31e22cb6bb690791c27bb0c3d4da8fa8bf533897d4f7fedf0b19a9dbe95c90f6d428087b7a071c2e046a9829d2411f768a0f2941f890e77920f8f8b0c3726bda4263c6dd9bc7e209dc4040175592ec6"}, &(0x7f0000000180)=0x106) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x19) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 4m37.920102669s ago: executing program 2 (id=443): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) 4m37.605775016s ago: executing program 2 (id=445): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_winnt}]}, 0x0, 0x2a7, &(0x7f0000000f00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18510c2, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 4m36.332576495s ago: executing program 2 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 4m35.591638664s ago: executing program 37 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 3m35.660232093s ago: executing program 8 (id=583): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x59ef, 0x10100, 0x2, 0x2ce, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_VL_READ(r6, 0x80047013, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) 3m34.121973525s ago: executing program 8 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 3m32.294133279s ago: executing program 8 (id=590): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@usrquota}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x654, 0x101000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x40, 0x140e, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x47447a4c9a82bb34}, 0x80008d4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) 3m28.745841416s ago: executing program 8 (id=597): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x4}, 0x8) 3m20.95768642s ago: executing program 8 (id=613): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) 3m18.365840847s ago: executing program 8 (id=614): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40503, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xfe, "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"}, &(0x7f0000000180)=0x106) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x19) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 3m2.807743328s ago: executing program 38 (id=614): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40503, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xfe, "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"}, &(0x7f0000000180)=0x106) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x19) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 2m46.008490938s ago: executing program 0 (id=664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000140), 0x24, 0x0) llistxattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m44.892877838s ago: executing program 0 (id=665): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r4, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r0}}, 0x18) 2m43.675888676s ago: executing program 0 (id=667): creat(0x0, 0xd931d3864d39dcca) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x14001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0xfffffffe, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) 2m42.717928788s ago: executing program 0 (id=669): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 2m38.106796138s ago: executing program 0 (id=675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000c1b000/0xf000)=nil) unshare(0x22020400) 2m35.407482883s ago: executing program 0 (id=680): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) 2m20.052662852s ago: executing program 39 (id=680): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) 2m18.182041462s ago: executing program 9 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) 2m12.28925094s ago: executing program 9 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000100)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 2m10.856900602s ago: executing program 9 (id=707): socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 2m8.842876527s ago: executing program 9 (id=708): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) 2m7.024982325s ago: executing program 9 (id=709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r5, 0x0, 0x0, 0x734, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00001b1000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r6, 0x108000) 1m57.310817457s ago: executing program 9 (id=718): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r5, 0x2}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001fc0)="dc080082a584fa7c61f0dcd9733f1d518dd5e022f136292cc2c312994aa9b7e326239d23a4dffcf0394f578769e67691bb30b0984e8a88e13c3e45b49622124a7a9b1bc1c667a08f578e606a5a200a6dbe2c9075", 0x54}], 0x1}}], 0x1, 0x4c040) syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x98c2, &(0x7f0000000700)="$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") 1m41.972671717s ago: executing program 40 (id=718): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r5, 0x2}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001fc0)="dc080082a584fa7c61f0dcd9733f1d518dd5e022f136292cc2c312994aa9b7e326239d23a4dffcf0394f578769e67691bb30b0984e8a88e13c3e45b49622124a7a9b1bc1c667a08f578e606a5a200a6dbe2c9075", 0x54}], 0x1}}], 0x1, 0x4c040) syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x98c2, &(0x7f0000000700)="$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") 41.941042072s ago: executing program 3 (id=804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/18, 0x12) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0xa0, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x980902}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000000)=0x7, 0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = socket(0xa, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x4e1f, 0xfffffffe, 'lblcr\x00', 0x32, 0x0, 0xfffffffd}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180), 0x220240, 0x0) 40.371438468s ago: executing program 3 (id=807): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000300"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 36.640946365s ago: executing program 3 (id=812): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 32.678656021s ago: executing program 3 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x5, 0x72, 0x20000}, 0x20) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) 29.862684629s ago: executing program 3 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3e5, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) 24.653755469s ago: executing program 3 (id=827): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) r6 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.410567543s ago: executing program 6 (id=833): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x40503, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xfe, "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"}, &(0x7f0000000180)=0x106) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x19) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 15.275239233s ago: executing program 6 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) 11.645129628s ago: executing program 1 (id=846): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 10.452234681s ago: executing program 1 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 7.682754224s ago: executing program 6 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) accept(0xffffffffffffffff, &(0x7f0000000080)=@can, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.682075248s ago: executing program 1 (id=851): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) 7.663317004s ago: executing program 7 (id=852): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.590451393s ago: executing program 6 (id=853): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000400)={[{@errors_continue}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@umask={'umask', 0x3d, 0x9}}, {@zero_size_dir}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@discard}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@dmask}], [{@obj_role={'obj_role', 0x3d, '!'}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, 'maccroatian'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_eq}]}, 0x1, 0x1534, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 5.552375587s ago: executing program 1 (id=854): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000400)={[{@errors_continue}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@umask={'umask', 0x3d, 0x9}}, {@zero_size_dir}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@discard}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@dmask}], [{@obj_role={'obj_role', 0x3d, '!'}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, 'maccroatian'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_eq}]}, 0x1, 0x1534, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 4.854539495s ago: executing program 6 (id=855): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.711067051s ago: executing program 7 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) 4.19311252s ago: executing program 7 (id=857): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 3.014060596s ago: executing program 7 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000040) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x60}}, 0x0) 2.371762442s ago: executing program 6 (id=859): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000400)={[{@errors_continue}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@umask={'umask', 0x3d, 0x9}}, {@zero_size_dir}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@discard}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@dmask}], [{@obj_role={'obj_role', 0x3d, '!'}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, 'maccroatian'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_eq}]}, 0x1, 0x1534, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 2.350867906s ago: executing program 7 (id=860): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 2.021991684s ago: executing program 1 (id=861): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 960.763379ms ago: executing program 7 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) 0s ago: executing program 1 (id=863): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): 0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.056215][ T7280] ? lru_gen_update_size+0x7c9/0xd10 [ 327.056261][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.056295][ T7280] ? __lock_acquire+0x6b5/0x2cf0 [ 327.056361][ T7280] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 327.056394][ T7280] do_writepages+0x32e/0x550 [ 327.056431][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.056462][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.056494][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.056522][ T7280] ? do_raw_spin_unlock+0xf5/0x210 [ 327.056557][ T7280] filemap_fdatawrite+0x1e9/0x2f0 [ 327.056597][ T7280] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 327.056674][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.056705][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.056746][ T7280] ? do_raw_spin_unlock+0xf5/0x210 [ 327.056780][ T7280] f2fs_sync_dirty_inodes+0x30e/0x810 [ 327.056831][ T7280] f2fs_write_checkpoint+0x9c6/0x2490 [ 327.056899][ T7280] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 327.056931][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.057023][ T7280] kill_f2fs_super+0x308/0x710 [ 327.057063][ T7280] ? __pfx_kill_f2fs_super+0x10/0x10 [ 327.057124][ T7280] deactivate_locked_super+0xbc/0x130 [ 327.057160][ T7280] cleanup_mnt+0x437/0x4d0 [ 327.057192][ T7280] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.057236][ T7280] task_work_run+0x1d9/0x270 [ 327.057272][ T7280] ? __pfx_task_work_run+0x10/0x10 [ 327.057309][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.057349][ T7280] exit_to_user_mode_loop+0xed/0x480 [ 327.057384][ T7280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.057411][ T7280] ? rcu_is_watching+0x15/0xb0 [ 327.057439][ T7280] do_syscall_64+0x2b7/0xf80 [ 327.057465][ T7280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.057489][ T7280] ? trace_irq_disable+0x37/0x100 [ 327.057519][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.057543][ T7280] RIP: 0033:0x7f3127f9c117 [ 327.057565][ T7280] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 327.057584][ T7280] RSP: 002b:00007fff2095fa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 327.057609][ T7280] RAX: 0000000000000000 RBX: 00007f312800471f RCX: 00007f3127f9c117 [ 327.057626][ T7280] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2095fb10 [ 327.057641][ T7280] RBP: 00007fff2095fb10 R08: 00007fff20960b10 R09: 00000000ffffffff [ 327.057658][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff20960ba0 [ 327.057674][ T7280] R13: 00007f312800471f R14: 000000000004fabf R15: 00007fff20960be0 [ 327.057712][ T7280] [ 327.478960][ T7280] F2FS-fs (loop7): Remounting filesystem read-only [ 327.498476][ T5827] Bluetooth: hci2: command tx timeout [ 327.816480][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 327.861862][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 328.813378][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.866099][ T7688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.954742][ T7688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.130223][ T7688] team0: Port device team_slave_0 added [ 329.150254][ T7688] team0: Port device team_slave_1 added [ 329.332802][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.338018][ T7772] loop7: detected capacity change from 0 to 32768 [ 329.356640][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.448093][ T7772] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.457843][ T7688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.569779][ T7772] XFS (loop7): Ending clean mount [ 329.576441][ T5827] Bluetooth: hci2: command tx timeout [ 329.583578][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.591580][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.618812][ T7688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.632933][ T7772] XFS (loop7): Quotacheck needed: Please wait. [ 329.790248][ T7772] XFS (loop7): Quotacheck: Done. [ 329.801346][ T7542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.022062][ T7716] chnl_net:caif_netlink_parms(): no params data found [ 330.035899][ T7280] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 330.074005][ T7688] hsr_slave_0: entered promiscuous mode [ 330.088042][ T7688] hsr_slave_1: entered promiscuous mode [ 330.099167][ T7688] debugfs: 'hsr0' already exists in 'hsr' [ 330.105252][ T7688] Cannot create hsr debugfs directory [ 330.111150][ T5997] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 330.288893][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.323249][ T5997] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 330.340928][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.377193][ T5997] usb 3-1: config 0 descriptor?? [ 330.534185][ T7553] veth0_vlan: entered promiscuous mode [ 330.773907][ T7553] veth1_vlan: entered promiscuous mode [ 330.788309][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.799021][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.808963][ T7716] bridge_slave_0: entered allmulticast mode [ 330.813257][ T5997] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 330.818474][ T7716] bridge_slave_0: entered promiscuous mode [ 330.836316][ T5997] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 330.864433][ T5997] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 330.926097][ T5997] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 330.960362][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.993452][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.036834][ T7716] bridge_slave_1: entered allmulticast mode [ 331.069523][ T7716] bridge_slave_1: entered promiscuous mode [ 331.103539][ T5997] usb 3-1: USB disconnect, device number 7 [ 331.162551][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.594540][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.864512][ T7811] fido_id[7811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 332.329902][ T7716] team0: Port device team_slave_0 added [ 332.371880][ T7817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.370'. [ 332.470180][ T7817] netem: unknown loss type 13 [ 332.575018][ T7817] netem: change failed [ 333.061824][ T7716] team0: Port device team_slave_1 added [ 333.371816][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 333.536544][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 333.545682][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 333.565154][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.657549][ T10] usb 3-1: config 0 descriptor?? [ 333.871432][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 333.902117][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.937120][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 333.954947][ T10] usb 3-1: media controller created [ 333.993920][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.079678][ T10] az6027: usb out operation failed. (-71) [ 334.106613][ T10] az6027: usb out operation failed. (-71) [ 334.116804][ T10] stb0899_attach: Driver disabled by Kconfig [ 334.132908][ T10] az6027: no front-end attached [ 334.132908][ T10] [ 334.162797][ T10] az6027: usb out operation failed. (-71) [ 334.173317][ T7553] veth0_macvtap: entered promiscuous mode [ 334.183829][ T7553] veth1_macvtap: entered promiscuous mode [ 334.194550][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 334.234243][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 334.306867][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 334.336579][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.343555][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.377691][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 334.422764][ T10] usb 3-1: USB disconnect, device number 8 [ 334.516655][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.571170][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.580496][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 334.608433][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.712819][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.769943][ T7542] veth0_vlan: entered promiscuous mode [ 335.067791][ T7553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.131295][ T7542] veth1_vlan: entered promiscuous mode [ 335.189446][ T7716] hsr_slave_0: entered promiscuous mode [ 335.208164][ T7716] hsr_slave_1: entered promiscuous mode [ 335.225506][ T7716] debugfs: 'hsr0' already exists in 'hsr' [ 335.244862][ T7716] Cannot create hsr debugfs directory [ 335.261404][ T7824] loop7: detected capacity change from 0 to 262144 [ 335.278429][ T7824] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.372 (7824) [ 335.309968][ T7553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.356924][ T7824] BTRFS info (device loop7): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 335.367316][ T7824] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 335.927938][ T7824] BTRFS info (device loop7): setting nodatasum [ 335.934171][ T7824] BTRFS info (device loop7): enabling ssd optimizations [ 335.941237][ T7824] BTRFS info (device loop7): turning on async discard [ 335.948190][ T7824] BTRFS info (device loop7): enabling free space tree [ 336.031205][ T7280] BTRFS info (device loop7): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 336.208276][ T6496] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.896868][ T7855] loop8: detected capacity change from 0 to 8 [ 336.941283][ T6496] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.952590][ T7855] Dev loop8: unable to read RDB block 8 [ 336.989551][ T6496] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.017272][ T7855] loop8: unable to read partition table [ 337.039347][ T7855] loop8: partition table beyond EOD, truncated [ 337.056820][ T7855] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 337.312265][ T7542] veth0_macvtap: entered promiscuous mode [ 337.334552][ T6496] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.421669][ T7542] veth1_macvtap: entered promiscuous mode [ 337.470722][ T7688] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 337.511124][ T7688] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 337.709365][ T7688] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 337.791568][ T7688] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 338.086121][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.122936][ T7859] loop7: detected capacity change from 0 to 32768 [ 338.149640][ T7859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.377 (7859) [ 338.206381][ T7859] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.219829][ T7857] loop2: detected capacity change from 0 to 32768 [ 338.251094][ T7859] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 338.297845][ T7857] diRead: diIAGRead returned -5 [ 338.302994][ T7857] jfs_lookup: iget failed on inum 1048352 [ 338.331181][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.508830][ T7859] BTRFS info (device loop7): enabling ssd optimizations [ 338.515858][ T7859] BTRFS info (device loop7): turning on async discard [ 338.566241][ T1092] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.586374][ T7859] BTRFS info (device loop7): enabling free space tree [ 338.602102][ T1092] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.775304][ T6496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.839759][ T6496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.866626][ T1092] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.616448][ T1092] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.774545][ T7859] BTRFS info (device loop7): balance: start -s [ 339.799955][ T7859] BTRFS info (device loop7): left=0, need=98304, flags=2 [ 339.828205][ T7859] BTRFS info (device loop7): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 339.838540][ T7859] BTRFS info (device loop7): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 339.852548][ T7859] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1441792 [ 339.861619][ T7859] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0 [ 339.869488][ T7859] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0 [ 339.877243][ T7859] BTRFS info (device loop7): delayed_block_rsv: size 0 reserved 0 [ 339.885194][ T7859] BTRFS info (device loop7): delayed_refs_rsv: size 0 reserved 0 [ 339.943073][ T7859] BTRFS info (device loop7): relocating block group 1048576 flags system [ 340.101660][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.133434][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.290840][ T7859] BTRFS info (device loop7): balance: ended with status: 0 [ 340.351871][ T6496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.396246][ T6496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.490786][ T7280] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 340.571626][ T7688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.631603][ T7716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.688473][ T7908] loop9: detected capacity change from 0 to 8 [ 340.741839][ T7908] SQUASHFS error: Unable to read directory block [629:26] [ 340.781220][ T7716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.942390][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.971828][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.015910][ T7716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.088923][ T7716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.239050][ T5922] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 341.746526][ T5922] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.770520][ T7920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.792943][ T7688] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.798050][ T5922] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 341.842472][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.887982][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.895209][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.903024][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 341.954355][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 342.009581][ T5922] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.028826][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.035956][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.045852][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.113290][ T5922] usb 3-1: Product: syz [ 342.152134][ T5922] usb 3-1: Manufacturer: syz [ 342.218941][ T5922] cdc_wdm 3-1:1.0: skipping garbage [ 342.266589][ T5922] cdc_wdm 3-1:1.0: skipping garbage [ 342.309063][ T5922] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 342.356229][ T5922] cdc_wdm 3-1:1.0: Unknown control protocol [ 342.449897][ T7688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.461076][ T7688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.707428][ T5997] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 343.297081][ T5997] usb 7-1: Using ep0 maxpacket: 32 [ 343.317150][ T5997] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 343.345248][ T5935] usb 3-1: USB disconnect, device number 9 [ 343.378688][ T5997] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 343.534686][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.635548][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 343.666470][ T5997] usb 7-1: Product: syz [ 343.670673][ T5997] usb 7-1: Manufacturer: syz [ 343.675268][ T5997] usb 7-1: SerialNumber: syz [ 343.677354][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.764480][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.771765][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.873055][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.880318][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.062728][ T5997] usb 7-1: config 0 descriptor?? [ 344.080368][ T7932] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 344.619415][ T7964] loop9: detected capacity change from 0 to 1024 [ 345.529805][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.601788][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.390'. [ 345.662206][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.390'. [ 346.231078][ T5997] usb 7-1: USB disconnect, device number 2 [ 346.441127][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.665332][ T7716] veth0_vlan: entered promiscuous mode [ 346.718310][ T7716] veth1_vlan: entered promiscuous mode [ 346.833334][ T7716] veth0_macvtap: entered promiscuous mode [ 346.879697][ T7716] veth1_macvtap: entered promiscuous mode [ 347.006617][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.058105][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.136223][ T6092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.170756][ T8010] loop9: detected capacity change from 0 to 2048 [ 347.219074][ T8010] ext4: Unknown parameter 'fowner>00000000000000000000' [ 347.302311][ T6092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.354150][ T6092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.367261][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.9.399'. [ 347.441305][ T6092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.649057][ T7688] veth0_vlan: entered promiscuous mode [ 347.794942][ T7688] veth1_vlan: entered promiscuous mode [ 347.827424][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.835354][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.851760][ T8020] loop9: detected capacity change from 0 to 1024 [ 347.994328][ T8020] hfsplus: xattr searching failed [ 348.065348][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.080057][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.138658][ T7688] veth0_macvtap: entered promiscuous mode [ 348.174158][ T7688] veth1_macvtap: entered promiscuous mode [ 348.280734][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.355358][ T8007] loop7: detected capacity change from 0 to 32768 [ 348.378748][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.425752][ T8007] (syz.7.398,8007,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.458018][ T3019] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.482041][ T8007] (syz.7.398,8007,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.546406][ T5827] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 348.547354][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 348.640333][ T3019] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.655686][ T8007] JBD2: Ignoring recovery information on journal [ 348.697749][ T3019] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.862264][ T3019] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.884623][ T8037] loop0: detected capacity change from 0 to 64 [ 348.896322][ T8007] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 349.197071][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.204917][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.262308][ T7716] syz-executor: attempt to access beyond end of device [ 349.262308][ T7716] loop0: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 349.326768][ T7716] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 349.343885][ T7716] syz-executor: attempt to access beyond end of device [ 349.343885][ T7716] loop0: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 349.392199][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.406441][ T7716] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 349.436051][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.449960][ T7716] Trying to free block not in datazone [ 349.572316][ T8043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.755146][ T7280] ocfs2: Unmounting device (7,7) on (node local) [ 352.357917][ T5922] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 352.546245][ T5922] usb 8-1: Using ep0 maxpacket: 32 [ 352.553807][ T5922] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 352.563833][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.597056][ T5922] usb 8-1: config 0 descriptor?? [ 352.847176][ T5922] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 352.870968][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.927971][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 352.935318][ T5922] usb 8-1: media controller created [ 352.969784][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.480039][ T8092] 9pnet_virtio: no channels available for device syz [ 354.367280][ T5922] DVB: Unable to find symbol dib7000p_attach() [ 354.373473][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 354.764331][ T5922] rc_core: IR keymap rc-dib0700-rc5 not found [ 354.787835][ T5922] Registered IR keymap rc-empty [ 354.823637][ T5922] dvb-usb: could not initialize remote control. [ 354.846271][ T5922] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 354.902219][ T5922] usb 8-1: USB disconnect, device number 3 [ 354.985130][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 355.012651][ T8107] loop7: detected capacity change from 0 to 7 [ 355.053782][ T8107] Dev loop7: unable to read RDB block 7 [ 355.087629][ T5922] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 355.117140][ T8107] loop7: unable to read partition table [ 355.123019][ T8107] loop7: partition table beyond EOD, truncated [ 355.224808][ T8107] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.672802][ T8129] loop2: detected capacity change from 0 to 64 [ 355.806864][ T5935] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 356.010386][ T5935] usb 9-1: Using ep0 maxpacket: 32 [ 356.049653][ T5935] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 356.082183][ T5935] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 356.120146][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 356.150999][ T5935] usb 9-1: Product: syz [ 356.155203][ T5935] usb 9-1: Manufacturer: syz [ 356.176309][ T5935] usb 9-1: SerialNumber: syz [ 356.210066][ T5935] usb 9-1: config 0 descriptor?? [ 356.216501][ T8124] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 356.259133][ T5935] hub 9-1:0.0: bad descriptor, ignoring hub [ 356.276495][ T5935] hub 9-1:0.0: probe with driver hub failed with error -5 [ 356.425176][ T8103] loop6: detected capacity change from 0 to 40427 [ 356.522130][ T8103] F2FS-fs: heap/no_heap options were deprecated [ 356.579872][ T8103] F2FS-fs (loop6): Image doesn't support compression [ 356.598251][ T5997] usb 9-1: USB disconnect, device number 2 [ 356.624115][ T8103] F2FS-fs (loop6): invalid crc value [ 356.885915][ T8155] loop2: detected capacity change from 0 to 128 [ 356.914760][ T8103] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 356.946385][ T8155] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 356.987593][ T8103] F2FS-fs (loop6): Start checkpoint disabled! [ 357.006637][ T8155] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 357.017414][ T5827] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 357.040840][ T8103] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 357.070672][ T8155] FAT-fs (loop2): Filesystem has been set read-only [ 357.092093][ T8103] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 357.280414][ T8103] syz.6.420: attempt to access beyond end of device [ 357.280414][ T8103] loop6: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 357.367300][ T8103] syz.6.420: attempt to access beyond end of device [ 357.367300][ T8103] loop6: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 357.466425][ T31] audit: type=1800 audit(1769699891.215:11): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.420" name="/" dev="loop6" ino=8 res=0 errno=0 [ 357.584910][ T8171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.676726][ T6014] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 357.739538][ T8169] tmpfs: Unknown parameter '01777777777777777777777ÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ' [ 357.772431][ T3019] kworker/u8:9: attempt to access beyond end of device [ 357.772431][ T3019] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.002631][ T3019] CPU: 0 UID: 0 PID: 3019 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.002670][ T3019] Tainted: [L]=SOFTLOCKUP [ 358.002680][ T3019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 358.002697][ T3019] Workqueue: writeback wb_workfn (flush-7:6) [ 358.002742][ T3019] Call Trace: [ 358.002752][ T3019] [ 358.002763][ T3019] dump_stack_lvl+0xe8/0x150 [ 358.002798][ T3019] f2fs_handle_critical_error+0x37c/0x540 [ 358.002843][ T3019] f2fs_write_end_io+0xc1d/0xfd0 [ 358.002896][ T3019] __submit_merged_bio+0x256/0x650 [ 358.002932][ T3019] __submit_merged_write_cond+0x269/0x530 [ 358.002968][ T3019] f2fs_write_data_pages+0x2806/0x3360 [ 358.003038][ T3019] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.003086][ T3019] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 358.003162][ T3019] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 358.003212][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.003241][ T3019] ? __lock_acquire+0x6b5/0x2cf0 [ 358.003298][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.003327][ T3019] ? __update_load_avg_se+0x79a/0xbe0 [ 358.003363][ T3019] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.003397][ T3019] do_writepages+0x32e/0x550 [ 358.003440][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.003468][ T3019] ? reacquire_held_locks+0x104/0x190 [ 358.003492][ T3019] ? writeback_sb_inodes+0x42a/0x1940 [ 358.003524][ T3019] __writeback_single_inode+0x133/0x1230 [ 358.003551][ T3019] ? do_raw_spin_unlock+0xf5/0x210 [ 358.003585][ T3019] writeback_sb_inodes+0x92e/0x1940 [ 358.003629][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.003668][ T3019] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 358.003690][ T3019] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.003764][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.003792][ T3019] ? rcu_is_watching+0x15/0xb0 [ 358.003817][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.003855][ T3019] wb_writeback+0x445/0xad0 [ 358.003885][ T3019] ? queue_io+0x211/0x450 [ 358.003917][ T3019] ? __pfx_wb_writeback+0x10/0x10 [ 358.003938][ T3019] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.003986][ T3019] wb_workfn+0x3f8/0xef0 [ 358.004017][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004045][ T3019] ? look_up_lock_class+0x57/0x110 [ 358.004093][ T3019] ? __pfx_wb_workfn+0x10/0x10 [ 358.004130][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004158][ T3019] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.004184][ T3019] ? lock_acquire+0x106/0x330 [ 358.004221][ T3019] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.004253][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004291][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004323][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004358][ T3019] ? process_scheduled_works+0xa0f/0x17a0 [ 358.004395][ T3019] ? process_scheduled_works+0xa0f/0x17a0 [ 358.004435][ T3019] process_scheduled_works+0xaec/0x17a0 [ 358.004506][ T3019] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.004541][ T3019] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.004573][ T3019] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.004600][ T3019] ? schedule+0x90/0x360 [ 358.004627][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004662][ T3019] worker_thread+0xda6/0x1360 [ 358.004732][ T3019] kthread+0x726/0x8b0 [ 358.004765][ T3019] ? __pfx_worker_thread+0x10/0x10 [ 358.004803][ T3019] ? __pfx_kthread+0x10/0x10 [ 358.004845][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004880][ T3019] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.004917][ T3019] ? __pfx_kthread+0x10/0x10 [ 358.004948][ T3019] ret_from_fork+0x51b/0xa40 [ 358.004990][ T3019] ? __pfx_ret_from_fork+0x10/0x10 [ 358.005026][ T3019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.005054][ T3019] ? __switch_to+0xc82/0x1410 [ 358.005093][ T3019] ? __pfx_kthread+0x10/0x10 [ 358.005124][ T3019] ret_from_fork_asm+0x1a/0x30 [ 358.005178][ T3019] [ 358.396405][ T3019] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 358.476849][ T6014] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.546349][ T6014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.646295][ T6014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 358.742580][ T6014] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.812334][ T6014] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.871217][ T6014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.950263][ T6014] usb 10-1: config 0 descriptor?? [ 359.187310][ T8192] loop2: detected capacity change from 0 to 128 [ 359.402355][ T6014] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 359.449161][ T6014] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 359.651396][ T2997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.902676][ T2997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.207485][ T2997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.469334][ T8210] loop6: detected capacity change from 0 to 512 [ 360.535896][ T8210] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.694808][ T8210] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 360.778387][ T8210] EXT4-fs (loop6): orphan cleanup on readonly fs [ 360.813646][ T2997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.836473][ T8210] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 360.848312][ T8210] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.872902][ T8210] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 360.899159][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.911323][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.924476][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.937848][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.948625][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.959051][ T8210] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.447: inode has both inline data and extents flags [ 361.023471][ T8210] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.447: couldn't read orphan inode 16 (err -117) [ 361.101137][ T8210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.243396][ T8210] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.447: path /8/file1: bad entry in directory: rec_len is too small for name_len - offset=0, inode=2, rec_len=12, size=4096 fake=0 [ 361.301519][ T2997] bridge_slave_1: left allmulticast mode [ 361.317843][ T2997] bridge_slave_1: left promiscuous mode [ 361.356345][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.467397][ T2997] bridge_slave_0: left allmulticast mode [ 361.484421][ T2997] bridge_slave_0: left promiscuous mode [ 361.510926][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.532302][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.547715][ T6014] usb 10-1: USB disconnect, device number 2 [ 361.564015][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.573717][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.586869][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.596038][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.599748][ T7542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.749574][ T8232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.394024][ T8222] loop8: detected capacity change from 0 to 32768 [ 362.454558][ T8222] find_entry called with index = 0 [ 362.483062][ T8222] find_entry called with index = 0 [ 362.714773][ T8242] JFS: block map error in dbBackSplit [ 362.761097][ T8242] ialloc: diAlloc returned -5! [ 362.774476][ T5915] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 362.980640][ T5915] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.018551][ T5827] Bluetooth: hci2: command tx timeout [ 363.041697][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.069941][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.097073][ T5915] usb 8-1: Product: syz [ 363.101347][ T5915] usb 8-1: Manufacturer: syz [ 363.105934][ T5915] usb 8-1: SerialNumber: syz [ 363.201634][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.213011][ T2997] bond0 (unregistering): Released all slaves [ 365.206504][ T5834] Bluetooth: hci2: command tx timeout [ 365.206533][ T5827] Bluetooth: hci4: command tx timeout [ 365.367660][ T5922] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 365.577164][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 365.619268][ T5922] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.652280][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 365.672519][ T5922] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 365.745683][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.797486][ T5922] usb 7-1: config 0 descriptor?? [ 365.859659][ T5915] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 366.341038][ T5915] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 366.498785][ T5922] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 366.530353][ T5922] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 367.139089][ T5922] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 367.256501][ T5827] Bluetooth: hci4: command tx timeout [ 367.256536][ T5834] Bluetooth: hci2: command tx timeout [ 367.271827][ T5915] usb 8-1: USB disconnect, device number 4 [ 367.299617][ T5915] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 367.316290][ T5922] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 367.355203][ T5922] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 367.430135][ T2997] hsr_slave_0: left promiscuous mode [ 367.484359][ T2997] hsr_slave_1: left promiscuous mode [ 367.510382][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.529060][ T5922] usb 7-1: USB disconnect, device number 3 [ 367.560293][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.604723][ T8269] fido_id[8269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 367.635924][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.665826][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.726131][ T2997] veth1_macvtap: left promiscuous mode [ 367.781750][ T2997] veth0_macvtap: left promiscuous mode [ 367.798079][ T2997] veth1_vlan: left promiscuous mode [ 367.819069][ T2997] veth0_vlan: left promiscuous mode [ 368.690541][ T8286] loop8: detected capacity change from 0 to 32768 [ 368.750208][ T8286] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 368.878230][ T8286] XFS (loop8): Ending clean mount [ 368.921194][ T8286] XFS (loop8): Quotacheck needed: Please wait. [ 369.038431][ T8286] XFS (loop8): Quotacheck: Done. [ 369.058358][ T31] audit: type=1800 audit(1769699902.825:12): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.458" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 369.081406][ T8286] xfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿ' [ 369.200690][ T8286] XFS (loop8): User initiated shutdown received. [ 369.210703][ T8286] XFS (loop8): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 369.226304][ T8286] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 369.319027][ T7688] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 369.329360][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 369.336962][ T5834] Bluetooth: hci2: command tx timeout [ 369.336982][ T5827] Bluetooth: hci4: command tx timeout [ 369.468142][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 370.584489][ T8303] loop8: detected capacity change from 0 to 32768 [ 370.605807][ T8274] syzkaller1: entered promiscuous mode [ 370.642965][ T8274] syzkaller1: entered allmulticast mode [ 370.673081][ T8303] XFS (loop8): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 370.737505][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 370.891271][ T8303] XFS (loop8): Starting recovery (logdev: internal) [ 372.492224][ T5827] Bluetooth: hci4: command tx timeout [ 372.633227][ T8303] XFS (loop8): Ending recovery (logdev: internal) [ 373.035346][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.472'. [ 373.062544][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.072870][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.081101][ T8218] bridge_slave_0: entered allmulticast mode [ 373.085514][ T7688] XFS (loop8): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 373.089691][ T8218] bridge_slave_0: entered promiscuous mode [ 373.375005][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.400914][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.421777][ T8218] bridge_slave_1: entered allmulticast mode [ 373.453100][ T8218] bridge_slave_1: entered promiscuous mode [ 373.519406][ T8228] chnl_net:caif_netlink_parms(): no params data found [ 373.722999][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.898539][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.972374][ T8342] loop8: detected capacity change from 0 to 128 [ 374.041354][ T8342] EXT4-fs (loop8): Test dummy encryption mode enabled [ 374.072466][ T8342] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.118532][ T8339] loop6: detected capacity change from 0 to 4096 [ 374.149013][ T8342] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.187731][ T8339] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 374.311660][ T8218] team0: Port device team_slave_0 added [ 374.388342][ T8218] team0: Port device team_slave_1 added [ 374.434831][ T31] audit: type=1800 audit(1769699908.195:13): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.477" name="bus" dev="loop6" ino=34 res=0 errno=0 [ 374.745106][ T7688] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.928667][ T2997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.995615][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.012957][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.025401][ T8228] bridge_slave_0: entered allmulticast mode [ 375.060296][ T8228] bridge_slave_0: entered promiscuous mode [ 375.151158][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.169029][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.197165][ T8228] bridge_slave_1: entered allmulticast mode [ 375.218366][ T8228] bridge_slave_1: entered promiscuous mode [ 375.313532][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.355659][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.398578][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.474217][ T2997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.542071][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.553745][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.584217][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.849247][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.935727][ T2997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.015513][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.814232][ T8368] loop6: detected capacity change from 0 to 32768 [ 376.879979][ T8368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.481 (8368) [ 377.016094][ T8368] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.084112][ T8368] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 377.310832][ T8368] BTRFS info (device loop6): turning off barriers [ 377.346955][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.487'. [ 377.356344][ T8368] BTRFS info (device loop6): enabling free space tree [ 377.376423][ T8368] BTRFS info (device loop6): use zstd compression, level 3 [ 377.764474][ T7542] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.881964][ T8432] Bluetooth: hci7: Frame reassembly failed (-90) [ 379.829841][ T2997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.112151][ T8438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.172384][ T8228] team0: Port device team_slave_0 added [ 380.199902][ T8443] vxcan1: entered allmulticast mode [ 380.259149][ T8218] hsr_slave_0: entered promiscuous mode [ 380.274963][ T8218] hsr_slave_1: entered promiscuous mode [ 380.284386][ T8218] debugfs: 'hsr0' already exists in 'hsr' [ 380.293556][ T8218] Cannot create hsr debugfs directory [ 380.308740][ T8228] team0: Port device team_slave_1 added [ 380.560179][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.578778][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.633270][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.748532][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.779518][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.857118][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.942429][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 380.951040][ T5827] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 381.466346][ T6014] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 381.487189][ T8228] hsr_slave_0: entered promiscuous mode [ 381.527524][ T8228] hsr_slave_1: entered promiscuous mode [ 381.555877][ T8228] debugfs: 'hsr0' already exists in 'hsr' [ 381.593830][ T8228] Cannot create hsr debugfs directory [ 381.630219][ T6014] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x42, changing to 0x2 [ 381.657774][ T6014] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 381.727404][ T6014] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.775517][ T6014] usb 8-1: config 0 interface 0 has no altsetting 0 [ 381.800474][ T6014] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 381.826269][ T6014] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 381.855284][ T6014] usb 8-1: Product: syz [ 381.872246][ T6014] usb 8-1: Manufacturer: syz [ 381.896818][ T6014] usb 8-1: SerialNumber: syz [ 381.927423][ T6014] usb 8-1: config 0 descriptor?? [ 381.939604][ T2997] bridge_slave_1: left allmulticast mode [ 381.969994][ T2997] bridge_slave_1: left promiscuous mode [ 381.979547][ T6014] usb 8-1: selecting invalid altsetting 0 [ 381.992709][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.025566][ T2997] bridge_slave_0: left allmulticast mode [ 382.042736][ T2997] bridge_slave_0: left promiscuous mode [ 382.064675][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.245437][ T6014] usb 8-1: USB disconnect, device number 5 [ 383.034332][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.053355][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.504163][ T8478] loop7: detected capacity change from 0 to 128 [ 383.620289][ T8478] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.721652][ T8478] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 383.955535][ T8478] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 31: comm syz.7.502: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 384.033343][ T8478] EXT4-fs (loop7): Remounting filesystem read-only [ 384.396120][ T8486] loop8: detected capacity change from 0 to 65536 [ 384.397261][ T7280] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.458144][ T8486] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 384.540561][ T8486] XFS (loop8): Ending clean mount [ 384.550271][ T8486] XFS (loop8): Quotacheck needed: Please wait. [ 384.597477][ T8486] XFS (loop8): Quotacheck: Done. [ 384.729870][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.747652][ T7688] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 384.860053][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.910701][ T2997] bond0 (unregistering): Released all slaves [ 385.262603][ T8488] loop6: detected capacity change from 0 to 40427 [ 385.317819][ T8488] F2FS-fs (loop6): build fault injection rate: 174 [ 385.360546][ T8488] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 385.423078][ T8488] F2FS-fs (loop6): invalid crc value [ 385.882973][ T8488] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 385.946327][ T8488] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 386.125142][ T8488] F2FS-fs (loop6): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xa90 [ 386.384541][ T7542] syz-executor: attempt to access beyond end of device [ 386.384541][ T7542] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 386.458551][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 386.458592][ T7542] Tainted: [L]=SOFTLOCKUP [ 386.458602][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 386.458617][ T7542] Call Trace: [ 386.458627][ T7542] [ 386.458638][ T7542] dump_stack_lvl+0xe8/0x150 [ 386.458676][ T7542] f2fs_handle_critical_error+0x37c/0x540 [ 386.458717][ T7542] f2fs_write_end_io+0xc1d/0xfd0 [ 386.458772][ T7542] __submit_merged_bio+0x256/0x650 [ 386.458809][ T7542] __submit_merged_write_cond+0x269/0x530 [ 386.458848][ T7542] f2fs_write_data_pages+0x2806/0x3360 [ 386.458927][ T7542] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 386.458977][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459007][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459035][ T7542] ? css_rstat_updated+0x23a/0x530 [ 386.459111][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459139][ T7542] ? rcu_is_watching+0x15/0xb0 [ 386.459169][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459201][ T7542] ? __lock_acquire+0x6b5/0x2cf0 [ 386.459258][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459286][ T7542] ? __lock_acquire+0x6b5/0x2cf0 [ 386.459339][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459367][ T7542] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.459404][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459437][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459466][ T7542] ? do_raw_spin_unlock+0xf5/0x210 [ 386.459496][ T7542] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 386.459530][ T7542] do_writepages+0x32e/0x550 [ 386.459569][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459600][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459634][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459662][ T7542] ? do_raw_spin_unlock+0xf5/0x210 [ 386.459697][ T7542] filemap_fdatawrite+0x1e9/0x2f0 [ 386.459739][ T7542] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 386.459827][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459858][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.459893][ T7542] ? do_raw_spin_unlock+0xf5/0x210 [ 386.459928][ T7542] f2fs_sync_dirty_inodes+0x30e/0x810 [ 386.459984][ T7542] f2fs_write_checkpoint+0x9c6/0x2490 [ 386.460068][ T7542] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 386.460101][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.460206][ T7542] kill_f2fs_super+0x308/0x710 [ 386.460250][ T7542] ? __pfx_kill_f2fs_super+0x10/0x10 [ 386.460317][ T7542] deactivate_locked_super+0xbc/0x130 [ 386.460354][ T7542] cleanup_mnt+0x437/0x4d0 [ 386.460386][ T7542] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.460431][ T7542] task_work_run+0x1d9/0x270 [ 386.460467][ T7542] ? __pfx_task_work_run+0x10/0x10 [ 386.460499][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.460540][ T7542] exit_to_user_mode_loop+0xed/0x480 [ 386.460575][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.460603][ T7542] ? rcu_is_watching+0x15/0xb0 [ 386.460632][ T7542] do_syscall_64+0x2b7/0xf80 [ 386.460659][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.460683][ T7542] ? trace_irq_disable+0x37/0x100 [ 386.460716][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.460740][ T7542] RIP: 0033:0x7fb32019c117 [ 386.460763][ T7542] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 386.460783][ T7542] RSP: 002b:00007fff2e1fd968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 386.460809][ T7542] RAX: 0000000000000000 RBX: 00007fb32020471f RCX: 00007fb32019c117 [ 386.460826][ T7542] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2e1fda20 [ 386.460841][ T7542] RBP: 00007fff2e1fda20 R08: 00007fff2e1fea20 R09: 00000000ffffffff [ 386.460859][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2e1feab0 [ 386.460875][ T7542] R13: 00007fb32020471f R14: 000000000005e470 R15: 00007fff2e1feaf0 [ 386.460920][ T7542] [ 386.460929][ T7542] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 386.877126][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 386.877166][ T7542] Tainted: [L]=SOFTLOCKUP [ 386.877176][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 386.877190][ T7542] Call Trace: [ 386.877201][ T7542] [ 386.877211][ T7542] dump_stack_lvl+0xe8/0x150 [ 386.877249][ T7542] f2fs_handle_critical_error+0x37c/0x540 [ 386.877290][ T7542] f2fs_write_end_io+0xc1d/0xfd0 [ 386.877346][ T7542] __submit_merged_bio+0x256/0x650 [ 386.877384][ T7542] __submit_merged_write_cond+0x269/0x530 [ 386.877423][ T7542] f2fs_write_data_pages+0x2806/0x3360 [ 386.877502][ T7542] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 386.877551][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.877581][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.877608][ T7542] ? css_rstat_updated+0x23a/0x530 [ 386.877674][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.877702][ T7542] ? rcu_is_watching+0x15/0xb0 [ 386.877733][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.877761][ T7542] ? __lock_acquire+0x6b5/0x2cf0 [ 386.877818][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.877846][ T7542] ? __lock_acquire+0x6b5/0x2cf0 [ 386.877887][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.877911][ T7542] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.877946][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.877980][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.878008][ T7542] ? do_raw_spin_unlock+0xf5/0x210 [ 386.878037][ T7542] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 386.878079][ T7542] do_writepages+0x32e/0x550 [ 386.878116][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.878148][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.878182][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.878210][ T7542] ? do_raw_spin_unlock+0xf5/0x210 [ 386.878246][ T7542] filemap_fdatawrite+0x1e9/0x2f0 [ 386.878288][ T7542] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 386.878372][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.878404][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.878439][ T7542] ? do_raw_spin_unlock+0xf5/0x210 [ 386.878475][ T7542] f2fs_sync_dirty_inodes+0x30e/0x810 [ 386.878531][ T7542] f2fs_write_checkpoint+0x9c6/0x2490 [ 386.878611][ T7542] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 386.878641][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.878738][ T7542] kill_f2fs_super+0x308/0x710 [ 386.878779][ T7542] ? __pfx_kill_f2fs_super+0x10/0x10 [ 386.878841][ T7542] deactivate_locked_super+0xbc/0x130 [ 386.878875][ T7542] cleanup_mnt+0x437/0x4d0 [ 386.878906][ T7542] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.878948][ T7542] task_work_run+0x1d9/0x270 [ 386.878982][ T7542] ? __pfx_task_work_run+0x10/0x10 [ 386.879011][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.879056][ T7542] exit_to_user_mode_loop+0xed/0x480 [ 386.879089][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.879114][ T7542] ? rcu_is_watching+0x15/0xb0 [ 386.879141][ T7542] do_syscall_64+0x2b7/0xf80 [ 386.879166][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.879187][ T7542] ? trace_irq_disable+0x37/0x100 [ 386.879218][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.879240][ T7542] RIP: 0033:0x7fb32019c117 [ 386.879261][ T7542] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 386.879280][ T7542] RSP: 002b:00007fff2e1fd968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 386.879304][ T7542] RAX: 0000000000000000 RBX: 00007fb32020471f RCX: 00007fb32019c117 [ 386.879320][ T7542] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2e1fda20 [ 386.879334][ T7542] RBP: 00007fff2e1fda20 R08: 00007fff2e1fea20 R09: 00000000ffffffff [ 386.879351][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2e1feab0 [ 386.879365][ T7542] R13: 00007fb32020471f R14: 000000000005e470 R15: 00007fff2e1feaf0 [ 386.879407][ T7542] [ 386.879416][ T7542] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 388.227671][ T8525] Set syz1 is full, maxelem 6117 reached [ 388.251251][ T2997] hsr_slave_0: left promiscuous mode [ 388.334805][ T2997] hsr_slave_1: left promiscuous mode [ 388.386047][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.418987][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.469814][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.496108][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.714881][ T2997] veth1_macvtap: left promiscuous mode [ 389.096298][ T2997] veth0_macvtap: left promiscuous mode [ 389.102001][ T2997] veth1_vlan: left promiscuous mode [ 389.121625][ T2997] veth0_vlan: left promiscuous mode [ 389.312137][ T8549] loop6: detected capacity change from 0 to 1024 [ 389.482875][ T31] audit: type=1800 audit(1769699923.245:14): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.516" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=5 res=0 errno=0 [ 389.678978][ T8549] hfsplus: b-tree write err: -5, ino 8 [ 389.842498][ T6089] hfsplus: b-tree write err: -5, ino 3 [ 390.692970][ T8566] loop6: detected capacity change from 0 to 32768 [ 390.706590][ T8566] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.518 (8566) [ 390.771826][ T8566] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.795027][ T8566] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 390.929487][ T8566] BTRFS info (device loop6): allowing degraded mounts [ 390.968420][ T8566] BTRFS info (device loop6): enabling ssd optimizations [ 390.975864][ T8566] BTRFS info (device loop6): turning on async discard [ 390.997837][ T8566] BTRFS info (device loop6): enabling free space tree [ 391.013824][ T8566] BTRFS info (device loop6): force zlib compression, level 3 [ 391.014390][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 391.203881][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 391.319234][ T7542] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.189736][ T8608] loop9: detected capacity change from 0 to 16 [ 393.251644][ T8608] erofs (device loop9): mounted with root inode @ nid 36. [ 393.302720][ T8611] loop6: detected capacity change from 0 to 256 [ 393.392986][ T8611] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 393.414140][ T5827] erofs (device loop9): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 9000 [ 393.442978][ T8608] erofs (device loop9): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 393.443141][ T8608] erofs (device loop9): read error -117 @ 1 of nid 89 [ 393.452211][ T31] audit: type=1800 audit(1769699927.205:15): pid=8608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.524" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 393.466774][ T8608] syz.9.524 (8608) used greatest stack depth: 18536 bytes left [ 393.543914][ T8611] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 394.173215][ T8626] loop9: detected capacity change from 0 to 40427 [ 394.180598][ T8626] F2FS-fs: heap/no_heap options were deprecated [ 394.259513][ T8626] F2FS-fs (loop9): Image doesn't support compression [ 394.270254][ T8626] F2FS-fs (loop9): invalid crc value [ 394.804168][ T8626] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 394.816477][ T8626] F2FS-fs (loop9): Start checkpoint disabled! [ 394.826310][ T8626] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 394.853236][ T8626] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 395.350712][ T8626] syz.9.528: attempt to access beyond end of device [ 395.350712][ T8626] loop9: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 395.365533][ T8626] syz.9.528: attempt to access beyond end of device [ 395.365533][ T8626] loop9: rw=2049, sector=53264, nr_sectors = 24 limit=40427 [ 395.379821][ T8626] syz.9.528: attempt to access beyond end of device [ 395.379821][ T8626] loop9: rw=2049, sector=53312, nr_sectors = 24 limit=40427 [ 395.394238][ T8626] syz.9.528: attempt to access beyond end of device [ 395.394238][ T8626] loop9: rw=2049, sector=53360, nr_sectors = 8 limit=40427 [ 395.408220][ T8626] syz.9.528: attempt to access beyond end of device [ 395.408220][ T8626] loop9: rw=2049, sector=53376, nr_sectors = 32 limit=40427 [ 395.423649][ T8626] syz.9.528: attempt to access beyond end of device [ 395.423649][ T8626] loop9: rw=2049, sector=53416, nr_sectors = 32 limit=40427 [ 395.437668][ T8626] syz.9.528: attempt to access beyond end of device [ 395.437668][ T8626] loop9: rw=2049, sector=53472, nr_sectors = 8 limit=40427 [ 395.480668][ T8626] syz.9.528: attempt to access beyond end of device [ 395.480668][ T8626] loop9: rw=0, sector=53472, nr_sectors = 8 limit=40427 [ 395.667191][ T6092] kworker/u8:15: attempt to access beyond end of device [ 395.667191][ T6092] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 395.726326][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.726370][ T6092] Tainted: [L]=SOFTLOCKUP [ 395.726381][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 395.726398][ T6092] Workqueue: writeback wb_workfn (flush-7:9) [ 395.726443][ T6092] Call Trace: [ 395.726452][ T6092] [ 395.726463][ T6092] dump_stack_lvl+0xe8/0x150 [ 395.726497][ T6092] f2fs_handle_critical_error+0x37c/0x540 [ 395.726535][ T6092] f2fs_write_end_io+0xc1d/0xfd0 [ 395.726584][ T6092] __submit_merged_bio+0x256/0x650 [ 395.726620][ T6092] __submit_merged_write_cond+0x269/0x530 [ 395.726655][ T6092] f2fs_write_data_pages+0x2806/0x3360 [ 395.726724][ T6092] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 395.726802][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.726831][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 395.726873][ T6092] ? __perf_event_task_sched_in+0xf2/0x1800 [ 395.726931][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.726959][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 395.727010][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727047][ T6092] ? finish_task_switch+0x23c/0x920 [ 395.727082][ T6092] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 395.727115][ T6092] do_writepages+0x32e/0x550 [ 395.727157][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727185][ T6092] ? reacquire_held_locks+0x104/0x190 [ 395.727208][ T6092] ? writeback_sb_inodes+0x42a/0x1940 [ 395.727240][ T6092] __writeback_single_inode+0x133/0x1230 [ 395.727267][ T6092] ? do_raw_spin_unlock+0xf5/0x210 [ 395.727301][ T6092] writeback_sb_inodes+0x92e/0x1940 [ 395.727325][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727381][ T6092] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 395.727404][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.727477][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727505][ T6092] ? rcu_is_watching+0x15/0xb0 [ 395.727530][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727568][ T6092] wb_writeback+0x445/0xad0 [ 395.727596][ T6092] ? queue_io+0x211/0x450 [ 395.727627][ T6092] ? __pfx_wb_writeback+0x10/0x10 [ 395.727647][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.727695][ T6092] wb_workfn+0x3f8/0xef0 [ 395.727725][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727753][ T6092] ? look_up_lock_class+0x57/0x110 [ 395.727798][ T6092] ? __pfx_wb_workfn+0x10/0x10 [ 395.727834][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727861][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.727888][ T6092] ? lock_acquire+0x106/0x330 [ 395.727924][ T6092] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.727956][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.727987][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.728018][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.728060][ T6092] ? process_scheduled_works+0xa0f/0x17a0 [ 395.728096][ T6092] ? process_scheduled_works+0xa0f/0x17a0 [ 395.728135][ T6092] process_scheduled_works+0xaec/0x17a0 [ 395.728205][ T6092] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.728240][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.728271][ T6092] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.728297][ T6092] ? schedule+0x90/0x360 [ 395.728324][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.728358][ T6092] worker_thread+0xda6/0x1360 [ 395.728427][ T6092] kthread+0x726/0x8b0 [ 395.728459][ T6092] ? __pfx_worker_thread+0x10/0x10 [ 395.728496][ T6092] ? __pfx_kthread+0x10/0x10 [ 395.728520][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.728554][ T6092] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.728589][ T6092] ? __pfx_kthread+0x10/0x10 [ 395.728618][ T6092] ret_from_fork+0x51b/0xa40 [ 395.728659][ T6092] ? __pfx_ret_from_fork+0x10/0x10 [ 395.728695][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.728722][ T6092] ? __switch_to+0xc82/0x1410 [ 395.728761][ T6092] ? __pfx_kthread+0x10/0x10 [ 395.728791][ T6092] ret_from_fork_asm+0x1a/0x30 [ 395.728845][ T6092] [ 396.113751][ T6092] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 396.406347][ T5997] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 396.430396][ T8647] loop7: detected capacity change from 0 to 512 [ 396.613229][ T5997] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 396.734092][ T8647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 396.744070][ T8647] EXT4-fs (loop7): orphan cleanup on readonly fs [ 396.782952][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.861299][ T8647] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 396.917051][ T8647] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 396.933115][ T8647] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.533: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 396.982060][ T8647] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.533: couldn't read orphan inode 13 (err -117) [ 397.052840][ T5997] usb 7-1: Product: syz [ 397.062845][ T8647] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.158328][ T5997] usb 7-1: Manufacturer: syz [ 397.181765][ T8647] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 397.293846][ T5997] usb 7-1: SerialNumber: syz [ 397.343214][ T8647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 397.618442][ T5997] usb 7-1: config 0 descriptor?? [ 398.643050][ T5997] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 398.775720][ T8647] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 399.404941][ T5997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.567853][ T5997] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 399.626341][ T5997] usb 7-1: media controller created [ 399.684289][ T5997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.704432][ T7280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.679973][ T5997] DVB: Unable to find symbol mt352_attach() [ 401.521606][ T5997] DVB: Unable to find symbol nxt6000_attach() [ 401.560565][ T5997] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 401.704352][ T5997] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9 [ 401.879336][ T5997] dvb-usb: schedule remote query interval to 1000 msecs. [ 401.991540][ T5997] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 402.189924][ T5997] dvb-usb: bulk message failed: -22 (7/0) [ 402.274323][ T5997] dvb-usb: bulk message failed: -22 (7/0) [ 402.389553][ T5997] usb 7-1: USB disconnect, device number 4 [ 402.770964][ T8218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.815453][ T5997] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 402.924884][ T8218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.059518][ T8688] syzkaller0: entered promiscuous mode [ 403.076003][ T8688] syzkaller0: entered allmulticast mode [ 403.086284][ T8218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.358839][ T5922] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 403.536363][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 403.558375][ T8218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.570064][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.626610][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.668658][ T5922] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 403.719422][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.752626][ T5922] usb 7-1: config 0 descriptor?? [ 403.898257][ T8228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.230255][ T8228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.416903][ T8228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.460692][ T8228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 404.507141][ T5922] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 404.856843][ T10] usb 7-1: USB disconnect, device number 5 [ 405.019837][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.108870][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.159952][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.185881][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.213605][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.220825][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.282599][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.289836][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.297583][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 405.335187][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.342444][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.420500][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.427841][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.476687][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 405.494633][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 405.542515][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 405.603492][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.652359][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.695015][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.708970][ T8218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.861675][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.253892][ T10] usb 10-1: GET_CAPABILITIES returned 0 [ 407.281386][ T10] usbtmc 10-1:16.0: can't read capabilities [ 407.517606][ T10] usb 10-1: USB disconnect, device number 3 [ 407.590093][ T8765] syzkaller0: entered promiscuous mode [ 407.595604][ T8765] syzkaller0: entered allmulticast mode [ 408.005931][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.368041][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 408.627361][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 408.939449][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 409.016409][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 409.087569][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.095702][ T10] usb 10-1: Product: syz [ 409.188790][ T10] usb 10-1: Manufacturer: syz [ 409.193541][ T10] usb 10-1: SerialNumber: syz [ 409.212206][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.232248][ T10] usb 10-1: config 0 descriptor?? [ 409.263173][ T10] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 409.314823][ T10] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 409.515120][ T8218] veth0_vlan: entered promiscuous mode [ 409.621246][ T8792] xt_l2tp: wrong L2TP version: 0 [ 410.095124][ T8218] veth1_vlan: entered promiscuous mode [ 410.244508][ T10] em28xx 10-1:0.0: chip ID is em2765 [ 410.349002][ T8218] veth0_macvtap: entered promiscuous mode [ 410.407545][ T8228] veth0_vlan: entered promiscuous mode [ 410.435642][ T8218] veth1_macvtap: entered promiscuous mode [ 410.708005][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 411.022975][ T10] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 411.047903][ T8228] veth1_vlan: entered promiscuous mode [ 411.085132][ T10] em28xx 10-1:0.0: board has no eeprom [ 411.665255][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.675730][ T10] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 411.713774][ T10] em28xx 10-1:0.0: dvb set to bulk mode. [ 411.745447][ T5984] em28xx 10-1:0.0: Binding DVB extension [ 411.770426][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.820308][ T10] usb 10-1: USB disconnect, device number 4 [ 411.849314][ T6092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.857679][ T10] em28xx 10-1:0.0: Disconnecting em28xx [ 411.944533][ T5984] em28xx 10-1:0.0: Registering input extension [ 411.968994][ T10] em28xx 10-1:0.0: Closing input extension [ 412.074602][ T8228] veth0_macvtap: entered promiscuous mode [ 412.084446][ T10] em28xx 10-1:0.0: Freeing device [ 412.138014][ T6092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.226436][ T6092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.357881][ T8228] veth1_macvtap: entered promiscuous mode [ 412.367050][ T6092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.616391][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.748969][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.865070][ T8821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.938163][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.973728][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.122628][ T2976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.231380][ T2976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.440034][ T2976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.481278][ T2976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.676451][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.694641][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.810485][ T8832] loop7: detected capacity change from 0 to 128 [ 415.707403][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.715253][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.944207][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.029146][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.204775][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 416.361710][ T5834] block nbd0: Receive control failed (result -1) [ 416.611025][ T8852] loop1: detected capacity change from 0 to 32768 [ 416.677877][ T8852] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.450 (8852) [ 416.723746][ T8852] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 416.734149][ T8852] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 417.005709][ T8852] BTRFS info (device loop1): enabling ssd optimizations [ 417.012882][ T8852] BTRFS info (device loop1): turning on async discard [ 417.019758][ T8852] BTRFS info (device loop1): enabling free space tree [ 417.064266][ T31] audit: type=1800 audit(1769699950.825:16): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.450" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 417.632272][ T8228] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.798354][ T8881] No control pipe specified [ 418.691599][ T8843] loop9: detected capacity change from 0 to 40427 [ 418.802091][ T8843] F2FS-fs (loop9): build fault injection rate: 174 [ 418.892835][ T8843] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 418.913184][ T8843] F2FS-fs (loop9): invalid crc value [ 419.122183][ T8843] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4) [ 422.606273][ T5997] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 422.968262][ T5997] usb 8-1: Using ep0 maxpacket: 16 [ 422.975473][ T5997] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.996216][ T5997] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.978837][ T5997] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.988111][ T5997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.997917][ T5997] usb 8-1: Product: syz [ 424.002079][ T5997] usb 8-1: Manufacturer: syz [ 424.006693][ T5997] usb 8-1: SerialNumber: syz [ 424.432698][ T8949] loop8: detected capacity change from 0 to 1024 [ 424.541614][ T8949] EXT4-fs: Ignoring removed i_version option [ 424.653932][ T5997] usb 8-1: 0:2 : does not exist [ 424.665101][ T5997] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 424.686374][ T8949] EXT4-fs (loop8): Test dummy encryption mode enabled [ 425.368158][ T8949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.387562][ T5997] usb 8-1: USB disconnect, device number 6 [ 426.376510][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 426.382558][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 426.489034][ T7664] udevd[7664]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.940695][ T7688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.133291][ T8996] syzkaller0: entered promiscuous mode [ 429.156380][ T8996] syzkaller0: entered allmulticast mode [ 430.884771][ T9019] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 433.486242][ T9010] sctp: [Deprecated]: syz.8.597 (pid 9010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.486242][ T9010] Use struct sctp_sack_info instead [ 435.626299][ T9037] loop6: detected capacity change from 0 to 1024 [ 435.633717][ T9037] EXT4-fs: Ignoring removed i_version option [ 435.741043][ T9037] EXT4-fs (loop6): Test dummy encryption mode enabled [ 435.889321][ T9037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.798395][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.8.613'. [ 438.648933][ T7542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.416967][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 442.996293][ T5836] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 443.295945][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.631799][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.924970][ T5836] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 443.955967][ T5836] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 443.992006][ T5836] usb 10-1: Manufacturer: syz [ 444.018189][ T9099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.033740][ T5836] usb 10-1: config 0 descriptor?? [ 444.461231][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.468434][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.890193][ T5836] uclogic 0003:256C:006D.0008: v1 frame probing failed: -71 [ 445.926333][ T5836] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 445.933938][ T5836] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 445.974900][ T5836] usb 10-1: USB disconnect, device number 5 [ 446.202222][ T9130] loop0: detected capacity change from 0 to 1024 [ 446.284766][ T9130] EXT4-fs: Ignoring removed i_version option [ 446.454514][ T9130] EXT4-fs (loop0): Test dummy encryption mode enabled [ 447.567985][ T9130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.639586][ T8218] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.677614][ T9152] sch_tbf: burst 0 is lower than device dummy0 mtu (1514) ! [ 448.738795][ T9155] sch_tbf: burst 0 is lower than device dummy0 mtu (1514) ! [ 448.986588][ T9155] sch_tbf: burst 0 is lower than device dummy0 mtu (1514) ! [ 451.359630][ T9173] loop0: detected capacity change from 0 to 1024 [ 452.966253][ T9179] hfsplus: xattr searching failed [ 455.737259][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 455.749043][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 455.757185][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 455.765156][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 455.772857][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 458.227925][ T5834] Bluetooth: hci7: command tx timeout [ 458.276295][ T5984] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 458.546260][ T5984] usb 7-1: Using ep0 maxpacket: 32 [ 458.581505][ T5984] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 458.777683][ T5984] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.791700][ T5984] usb 7-1: config 0 interface 0 has no altsetting 0 [ 458.809485][ T5984] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 458.869824][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.897441][ T5984] usb 7-1: config 0 descriptor?? [ 459.912068][ T5984] usb 7-1: can't set config #0, error -71 [ 459.936518][ T5984] usb 7-1: USB disconnect, device number 6 [ 460.296246][ T5834] Bluetooth: hci7: command tx timeout [ 462.378132][ T5834] Bluetooth: hci7: command tx timeout [ 463.475446][ T9196] chnl_net:caif_netlink_parms(): no params data found [ 464.630279][ T5834] Bluetooth: hci7: command tx timeout [ 465.402575][ T9264] loop1: detected capacity change from 0 to 512 [ 465.636255][ T9264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 465.780907][ T9264] EXT4-fs (loop1): 1 orphan inode deleted [ 465.865238][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.952370][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.973494][ T9264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.983298][ T9196] bridge_slave_0: entered allmulticast mode [ 466.013183][ T9196] bridge_slave_0: entered promiscuous mode [ 468.177838][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.216878][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.241309][ T9196] bridge_slave_1: entered allmulticast mode [ 468.256399][ T9196] bridge_slave_1: entered promiscuous mode [ 468.334774][ T9196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.348114][ T9196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.821742][ T9196] team0: Port device team_slave_0 added [ 468.880673][ T9196] team0: Port device team_slave_1 added [ 469.204913][ T8228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.547124][ T9196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.554111][ T9196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.787551][ T9196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.802417][ T9196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.809892][ T9196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.844839][ T9196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.056404][ T6014] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 471.861954][ T9196] hsr_slave_0: entered promiscuous mode [ 472.126280][ T6014] usb 2-1: Using ep0 maxpacket: 32 [ 472.133106][ T6014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.146273][ T6014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.163535][ T6014] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.173514][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.184579][ T6014] usb 2-1: config 0 descriptor?? [ 473.008822][ T6014] hub 2-1:0.0: USB hub found [ 473.036995][ T9196] hsr_slave_1: entered promiscuous mode [ 473.738329][ T6014] hub 2-1:0.0: 1 port detected [ 475.201045][ T6014] hub 2-1:0.0: activate --> -90 [ 475.212247][ T9322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.222353][ T9321] syzkaller0: entered promiscuous mode [ 475.230930][ T9321] syzkaller0: entered allmulticast mode [ 476.067013][ T6014] usb 2-1-port1: cannot reset (err = -71) [ 476.087009][ T10] usb 2-1: USB disconnect, device number 2 [ 476.111135][ T6014] usb 2-1-port1: attempt power cycle [ 477.547591][ T9328] loop1: detected capacity change from 0 to 1024 [ 477.555096][ T9328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 478.343828][ T9328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.492899][ T9336] syz_tun: entered promiscuous mode [ 478.552524][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.673'. [ 478.561410][ T31] audit: type=1800 audit(1769700012.315:17): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.672" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 478.716361][ T9340] syz_tun: left promiscuous mode [ 479.606283][ T5984] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 480.008517][ T5984] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 480.023108][ T5984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.063809][ T5984] usb 7-1: Product: syz [ 480.109422][ T5984] usb 7-1: Manufacturer: syz [ 480.135241][ T5984] usb 7-1: SerialNumber: syz [ 480.165160][ T5984] usb 7-1: config 0 descriptor?? [ 481.257532][ T5984] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 481.304326][ T8228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.426362][ T5984] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 486.203856][ T5872] usb 7-1: USB disconnect, device number 7 [ 487.853987][ T9388] loop6: detected capacity change from 0 to 47 [ 488.395607][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 488.403689][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 491.648476][ T9196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 491.703499][ T9196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.821074][ T9196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 491.863828][ T9196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.337400][ T5834] Bluetooth: hci7: command 0x0405 tx timeout [ 493.615949][ T9196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.808532][ T9196] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.093791][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.100993][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.916766][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.923945][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.910943][ T31] audit: type=1326 audit(1769700029.675:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.192323][ T9434] loop9: detected capacity change from 0 to 32768 [ 496.256724][ T31] audit: type=1326 audit(1769700029.725:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.279008][ T31] audit: type=1326 audit(1769700029.725:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.298322][ T9196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.305557][ T31] audit: type=1326 audit(1769700029.725:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.336938][ T31] audit: type=1326 audit(1769700029.725:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.359582][ T31] audit: type=1326 audit(1769700029.725:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.384272][ T9434] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 496.432494][ T9436] Bluetooth: MGMT ver 1.23 [ 496.449844][ T31] audit: type=1326 audit(1769700029.725:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.614772][ T9196] veth0_vlan: entered promiscuous mode [ 496.624221][ T31] audit: type=1326 audit(1769700029.725:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.859992][ T9196] veth1_vlan: entered promiscuous mode [ 496.872484][ T31] audit: type=1326 audit(1769700029.725:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4cf399aeb9 code=0x7ffc0000 [ 496.918771][ T9434] XFS (loop9): Ending clean mount [ 496.930506][ T9434] XFS (loop9): Quotacheck needed: Please wait. [ 497.036337][ T31] audit: type=1326 audit(1769700029.725:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.9.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4cf399ac22 code=0x7ffc0000 [ 497.746631][ T9434] XFS (loop9): Quotacheck: Done. [ 497.942464][ T9196] veth0_macvtap: entered promiscuous mode [ 498.425073][ T9196] veth1_macvtap: entered promiscuous mode [ 498.482332][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 498.495082][ T7553] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.496716][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 500.436570][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 500.448132][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.512168][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 500.532068][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.546375][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 500.828456][ T3019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.560276][ T3019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.582824][ T3019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.808374][ T3019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.460594][ T5834] Bluetooth: hci6: command tx timeout [ 503.516336][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.721716][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.500418][ T5834] Bluetooth: hci6: command tx timeout [ 505.798227][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.836300][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.192848][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.203209][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.827466][ T9457] chnl_net:caif_netlink_parms(): no params data found [ 507.576417][ T5834] Bluetooth: hci6: command tx timeout [ 509.667357][ T5834] Bluetooth: hci6: command tx timeout [ 509.965059][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.068608][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.075912][ T9457] bridge_slave_0: entered allmulticast mode [ 510.152901][ T9457] bridge_slave_0: entered promiscuous mode [ 510.195695][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.265247][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.962054][ T9457] bridge_slave_1: entered allmulticast mode [ 511.979154][ T9457] bridge_slave_1: entered promiscuous mode [ 513.089629][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.217608][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.380959][ T9457] team0: Port device team_slave_0 added [ 514.389585][ T9457] team0: Port device team_slave_1 added [ 514.693650][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.709848][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.814784][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.866602][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.891943][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.105217][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.715'. [ 516.586279][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.413918][ T9457] hsr_slave_0: entered promiscuous mode [ 520.442980][ T9457] hsr_slave_1: entered promiscuous mode [ 520.487647][ T9457] debugfs: 'hsr0' already exists in 'hsr' [ 520.493456][ T9457] Cannot create hsr debugfs directory [ 524.323535][ T9599] syz.1.716 (9599): /proc/9596/oom_adj is deprecated, please use /proc/9596/oom_score_adj instead. [ 529.207734][ T9635] macvlan0: entered allmulticast mode [ 529.254058][ T9635] veth1_vlan: entered allmulticast mode [ 530.438999][ T9645] loop6: detected capacity change from 0 to 1024 [ 534.933664][ T9669] sg_write: data in/out 393190/120 bytes for SCSI command 0x0-- guessing data in; [ 534.933664][ T9669] program syz.1.734 not setting count and/or reply_len properly [ 535.405644][ T9457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.593083][ T9457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 535.795041][ T9457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 536.966827][ T9673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.327230][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 537.360254][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 538.082626][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 538.154298][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 538.177667][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 538.280701][ T9693] loop1: detected capacity change from 0 to 1024 [ 538.416933][ T6100] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.828429][ T9457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 539.093508][ T9698] hfsplus: xattr searching failed [ 539.428704][ T6097] hfsplus: b-tree write err: -5, ino 4 [ 540.298187][ T5827] Bluetooth: hci8: command tx timeout [ 540.700372][ T6100] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.837228][ T9714] loop6: detected capacity change from 0 to 128 [ 542.182064][ T6100] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.376495][ T5827] Bluetooth: hci8: command tx timeout [ 542.786378][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 542.786404][ T31] audit: type=1400 audit(1769700076.235:60): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9707 comm="syz.1.745" [ 544.034312][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.750'. [ 544.280501][ T6100] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.307533][ T31] audit: type=1326 audit(1769700078.065:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.7.751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3127f9aeb9 code=0x0 [ 544.462128][ T5827] Bluetooth: hci8: command tx timeout [ 544.919229][ T9754] loop1: detected capacity change from 0 to 128 [ 545.566699][ T9754] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 545.584522][ T9754] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 546.202900][ T9764] loop3: detected capacity change from 0 to 2048 [ 546.283089][ T9764] NILFS (loop3): invalid segment: Inconsistency found [ 546.290271][ T9764] NILFS (loop3): trying rollback from an earlier position [ 546.545626][ T5827] Bluetooth: hci8: command tx timeout [ 547.983057][ T8228] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 548.008402][ T9764] NILFS (loop3): recovery complete [ 548.187528][ T9767] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 549.141968][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.305293][ T9686] chnl_net:caif_netlink_parms(): no params data found [ 549.706482][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 549.711648][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.845148][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.852603][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.983415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.990712][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.104524][ T6100] bridge_slave_1: left allmulticast mode [ 550.136315][ T6100] bridge_slave_1: left promiscuous mode [ 550.166791][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.121554][ T6100] bridge_slave_0: left allmulticast mode [ 551.173630][ T6100] bridge_slave_0: left promiscuous mode [ 551.188208][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.817312][ T6100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.887152][ T6100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.941324][ T6100] bond0 (unregistering): Released all slaves [ 554.455819][ T9789] veth3: entered promiscuous mode [ 554.460982][ T9789] veth3: entered allmulticast mode [ 555.506456][ T5915] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 555.711200][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 555.895303][ T5915] usb 7-1: config 4 has an invalid interface number: 40 but max is 0 [ 556.095741][ T5915] usb 7-1: config 4 has no interface number 0 [ 556.127767][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.693714][ T5915] usb 7-1: config 4 interface 40 has no altsetting 0 [ 556.765023][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.798757][ T5915] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=8f.de [ 556.926381][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.927052][ T9686] bridge_slave_0: entered allmulticast mode [ 556.956686][ T9686] bridge_slave_0: entered promiscuous mode [ 556.965910][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.986253][ T5915] usb 7-1: Product: syz [ 556.990800][ T5915] usb 7-1: Manufacturer: syz [ 556.995412][ T5915] usb 7-1: SerialNumber: syz [ 557.006368][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.015784][ T9686] bridge_slave_1: entered allmulticast mode [ 557.088600][ T9686] bridge_slave_1: entered promiscuous mode [ 557.116318][ T5915] usb_ehset_test 7-1:4.40: probe with driver usb_ehset_test failed with error -32 [ 557.615953][ T9841] tipc: Enabling of bearer rejected, failed to enable media [ 558.016024][ T31] audit: type=1400 audit(1769700091.775:62): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9831 comm="syz.3.763" [ 559.487204][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 559.497106][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 559.506604][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 559.525168][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 559.607443][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.095524][ T9870] netlink: 68 bytes leftover after parsing attributes in process `syz.1.766'. [ 561.736473][ T5834] Bluetooth: hci1: command tx timeout [ 562.010836][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.077001][ T6014] usb 7-1: USB disconnect, device number 8 [ 562.135745][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.566239][ T5834] Bluetooth: hci1: command tx timeout [ 565.087373][ T6100] hsr_slave_0: left promiscuous mode [ 565.205606][ T6100] hsr_slave_1: left promiscuous mode [ 565.257063][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.264471][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.388978][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.407113][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.484254][ T5915] IPVS: starting estimator thread 0... [ 566.514605][ T6100] veth1_macvtap: left promiscuous mode [ 566.571157][ T6100] veth0_macvtap: left promiscuous mode [ 566.596464][ T6100] veth1_vlan: left promiscuous mode [ 566.596549][ T9897] IPVS: using max 34 ests per chain, 81600 per kthread [ 566.616832][ T5834] Bluetooth: hci1: command tx timeout [ 566.665341][ T6100] veth0_vlan: left promiscuous mode [ 566.892114][ T9901] loop1: detected capacity change from 0 to 512 [ 567.202387][ T9901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.347879][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.355821][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.425377][ T8228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.696679][ T5834] Bluetooth: hci1: command tx timeout [ 569.825212][ T9929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 573.239108][ T6100] team0 (unregistering): Port device team_slave_1 removed [ 573.670891][ T6100] team0 (unregistering): Port device team_slave_0 removed [ 573.773561][ T9949] loop3: detected capacity change from 0 to 2048 [ 573.849208][ T9949] NILFS (loop3): invalid segment: Checksum error in segment payload [ 573.885250][ T9949] NILFS (loop3): trying rollback from an earlier position [ 573.945506][ T9949] NILFS (loop3): invalid segment: Checksum error in segment payload [ 573.996265][ T9949] NILFS (loop3): error -22 while searching super root [ 575.157660][ T9949] loop3: detected capacity change from 0 to 2048 [ 575.291510][ T9949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.349973][ T9920] lo speed is unknown, defaulting to 1000 [ 575.355942][ T9920] lo speed is unknown, defaulting to 1000 [ 575.376152][ T31] audit: type=1800 audit(1769700109.135:63): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.781" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 575.377158][ T9943] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 575.406437][ T9943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 575.416095][ T9943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 575.433404][ T9950] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 575.453640][ T9950] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 575.525979][ T9686] team0: Port device team_slave_0 added [ 575.547660][ T9686] team0: Port device team_slave_1 added [ 575.613937][ T9949] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 576.096402][ T9920] lo speed is unknown, defaulting to 1000 [ 576.132573][ T9920] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 577.027336][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.034407][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.062424][ T9920] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 577.176556][ T9968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.208465][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.826992][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.833983][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.006248][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.142635][ T9920] lo speed is unknown, defaulting to 1000 [ 578.268293][ T9920] lo speed is unknown, defaulting to 1000 [ 578.275486][ T9920] lo speed is unknown, defaulting to 1000 [ 578.436324][ T9920] lo speed is unknown, defaulting to 1000 [ 578.589327][ T9686] hsr_slave_0: entered promiscuous mode [ 578.642006][ T9686] hsr_slave_1: entered promiscuous mode [ 578.677105][ T9686] debugfs: 'hsr0' already exists in 'hsr' [ 578.715299][ T9686] Cannot create hsr debugfs directory [ 579.165243][ T9920] lo speed is unknown, defaulting to 1000 [ 579.264180][ T9196] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.386256][ T9920] lo speed is unknown, defaulting to 1000 [ 579.516310][ T9920] lo speed is unknown, defaulting to 1000 [ 579.599022][ T9920] lo speed is unknown, defaulting to 1000 [ 579.660604][ T5827] Bluetooth: hci7: command 0x0405 tx timeout [ 579.806366][ T9920] lo speed is unknown, defaulting to 1000 [ 579.813630][ T9920] lo speed is unknown, defaulting to 1000 [ 579.866829][ T9859] chnl_net:caif_netlink_parms(): no params data found [ 582.075259][ T9998] loop3: detected capacity change from 0 to 2048 [ 582.260536][ T9998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.100482][ T9686] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.762793][T10019] binder: 10013:10019 unknown command 0 [ 584.780016][T10019] binder: 10013:10019 ioctl c0306201 200000000080 returned -22 [ 584.821903][T10018] loop6: detected capacity change from 0 to 2048 [ 584.987891][T10018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.270247][ T9686] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.723011][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.747157][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.754569][ T9859] bridge_slave_0: entered allmulticast mode [ 590.151565][ T9859] bridge_slave_0: entered promiscuous mode [ 592.533097][ T9686] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.365306][T10080] loop1: detected capacity change from 0 to 2048 [ 595.383572][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.493475][T10080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.576296][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.787983][ T9859] bridge_slave_1: entered allmulticast mode [ 596.002626][ T9859] bridge_slave_1: entered promiscuous mode [ 596.226357][ T5935] IPVS: starting estimator thread 0... [ 596.678937][T10083] IPVS: using max 25 ests per chain, 60000 per kthread [ 599.296824][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 599.317637][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 599.325952][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 599.336248][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 599.345818][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 599.585213][T10111] Cannot find add_set index 0 as target [ 599.586931][ T9686] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.180826][ T9859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.288780][ T5827] Bluetooth: hci6: command tx timeout [ 602.836272][ T9859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.894961][T10103] lo speed is unknown, defaulting to 1000 [ 604.299283][ T5827] Bluetooth: hci6: command tx timeout [ 605.041452][T10135] loop6: detected capacity change from 0 to 256 [ 605.134990][T10140] loop1: detected capacity change from 0 to 512 [ 605.303784][T10142] 0x00000000001f-0x100000000000001f : "" [ 605.310024][T10142] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffe1 [ 605.761545][T10135] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 605.819644][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.818'. [ 606.627950][ T9859] team0: Port device team_slave_0 added [ 606.639666][T10142] ftl_cs: FTL header corrupt! [ 606.678929][ T9859] team0: Port device team_slave_1 added [ 607.051741][T10154] loop6: detected capacity change from 0 to 256 [ 607.106320][ T5827] Bluetooth: hci6: command tx timeout [ 607.343717][T10154] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 607.397963][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.433167][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.533536][ T9859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.439386][ T5827] Bluetooth: hci6: command tx timeout [ 611.911605][T10181] loop6: detected capacity change from 0 to 2048 [ 611.923305][T10181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.027088][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.034066][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.176346][ T9859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.233264][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 613.245093][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 613.256432][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 613.268898][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 613.281612][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 613.574323][ T6483] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.548492][ T9859] hsr_slave_0: entered promiscuous mode [ 614.555074][ T9859] hsr_slave_1: entered promiscuous mode [ 614.636920][ T9859] debugfs: 'hsr0' already exists in 'hsr' [ 614.667362][ T9859] Cannot create hsr debugfs directory [ 614.692408][T10103] chnl_net:caif_netlink_parms(): no params data found [ 614.782114][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'. [ 614.905014][ T6483] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.336985][ T5834] Bluetooth: hci7: command tx timeout [ 615.538001][ T6483] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.784994][T10196] lo speed is unknown, defaulting to 1000 [ 616.973473][ T6483] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.359461][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.400769][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.416681][ T5834] Bluetooth: hci7: command tx timeout [ 617.438065][T10103] bridge_slave_0: entered allmulticast mode [ 617.461252][T10103] bridge_slave_0: entered promiscuous mode [ 617.509512][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.537090][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.726732][T10103] bridge_slave_1: entered allmulticast mode [ 617.737846][T10103] bridge_slave_1: entered promiscuous mode [ 618.867283][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 618.878345][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 619.107457][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 619.126945][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 619.636366][ T5827] Bluetooth: hci7: command tx timeout [ 619.645680][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 619.783586][T10103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.801489][T10103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.845694][T10103] team0: Port device team_slave_0 added [ 620.343303][T10103] team0: Port device team_slave_1 added [ 620.477605][T10263] : Can't lookup blockdev [ 621.529653][T10103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.666308][ T5834] Bluetooth: hci7: command tx timeout [ 621.744143][ T5834] Bluetooth: hci8: command tx timeout [ 622.369476][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.395774][T10103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.458669][T10103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.486960][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.682708][T10103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.738774][ T6483] bridge_slave_1: left allmulticast mode [ 622.744454][ T6483] bridge_slave_1: left promiscuous mode [ 622.805336][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.457375][ T6483] bridge_slave_0: left allmulticast mode [ 623.579441][ T6483] bridge_slave_0: left promiscuous mode [ 623.666447][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.735460][ T6483] bridge_slave_1: left allmulticast mode [ 623.774873][ T6483] bridge_slave_1: left promiscuous mode [ 623.816378][ T5834] Bluetooth: hci8: command tx timeout [ 623.826545][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.887347][ T6483] bridge_slave_0: left allmulticast mode [ 623.893017][ T6483] bridge_slave_0: left promiscuous mode [ 623.936581][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.510455][T10305] : Can't lookup blockdev [ 625.899636][ T5834] Bluetooth: hci8: command tx timeout [ 626.832042][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.077930][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.121338][ T6483] bond0 (unregistering): Released all slaves [ 627.217352][T10325] : Can't lookup blockdev [ 627.978570][ T5834] Bluetooth: hci8: command tx timeout [ 628.733518][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.753004][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.768214][ T6483] bond0 (unregistering): Released all slaves [ 628.781862][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.788683][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.824331][T10244] lo speed is unknown, defaulting to 1000 [ 631.288510][T10349] loop6: detected capacity change from 0 to 256 [ 631.324047][T10349] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 631.386340][T10347] loop1: detected capacity change from 0 to 256 [ 631.438266][T10347] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 632.335210][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz.7.856'. [ 632.503451][T10103] hsr_slave_0: entered promiscuous mode [ 632.527572][T10103] hsr_slave_1: entered promiscuous mode [ 632.533923][T10103] debugfs: 'hsr0' already exists in 'hsr' [ 632.566269][T10103] Cannot create hsr debugfs directory [ 632.937612][T10374] ufs: You didn't specify the type of your ufs filesystem [ 632.937612][T10374] [ 632.937612][T10374] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 632.937612][T10374] [ 632.937612][T10374] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 632.970332][T10374] ufs: ufstype=old is supported read-only [ 633.662136][T10196] chnl_net:caif_netlink_parms(): no params data found [ 634.244108][ T6483] hsr_slave_0: left promiscuous mode [ 634.278579][ T6483] hsr_slave_1: left promiscuous mode [ 634.308979][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.353817][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.381693][T10384] loop6: detected capacity change from 0 to 256 [ 634.443670][T10384] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 634.526936][ T6483] hsr_slave_0: left promiscuous mode [ 634.546758][ T6483] hsr_slave_1: left promiscuous mode [ 634.563151][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.609802][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.647162][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.675570][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.710515][ T6483] veth1_macvtap: left promiscuous mode [ 635.716097][ T6483] veth0_macvtap: left promiscuous mode [ 635.733595][ T6483] veth1_vlan: left allmulticast mode [ 635.750871][ T6483] veth1_vlan: left promiscuous mode [ 636.033711][ T6483] veth0_vlan: left promiscuous mode [ 637.098315][ T32] INFO: task syz.0.680:9361 blocked for more than 143 seconds. [ 637.106433][ T32] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 637.546531][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.555360][ T32] task:syz.0.680 state:D stack:26368 pid:9361 tgid:9357 ppid:8218 task_flags:0x400040 flags:0x00080002 [ 637.571717][ T32] Call Trace: [ 637.575174][ T32] [ 637.581446][ T32] __schedule+0x14ea/0x5050 [ 637.586924][ T32] ? __pfx___schedule+0x10/0x10 [ 637.592053][ T32] ? schedule+0x90/0x360 [ 637.896690][ T32] schedule+0x164/0x360 [ 637.901027][ T32] schedule_preempt_disabled+0x13/0x30 [ 638.007160][ T32] rwsem_down_read_slowpath+0x61e/0x920 [ 638.044626][ T32] ? rwsem_down_read_slowpath+0x4d9/0x920 [ 638.098852][ T32] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 638.104992][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.156345][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.162057][ T32] down_read+0x99/0x2e0 [ 638.186650][ T32] ? super_lock+0x263/0x3d0 [ 638.191301][ T32] super_lock+0x2d6/0x3d0 [ 638.195657][ T32] ? __pfx_super_lock+0x10/0x10 [ 638.224106][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.229654][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.235312][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.241322][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.247215][ T32] ? do_raw_spin_unlock+0xf5/0x210 [ 638.252351][ T32] __iterate_supers+0x126/0x290 [ 638.257477][ T32] ? __pfx_quota_sync_one+0x10/0x10 [ 638.262706][ T32] __se_sys_quotactl+0x382/0x990 [ 638.267955][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.273612][ T32] ? __se_sys_futex+0x3a8/0x450 [ 638.278827][ T32] ? __pfx___se_sys_quotactl+0x10/0x10 [ 638.284300][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.296427][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.302092][ T32] do_syscall_64+0xe2/0xf80 [ 638.310897][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.320575][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.326749][ T32] RIP: 0033:0x7f2d46b9aeb9 [ 638.331173][ T32] RSP: 002b:00007f2d479e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 638.340077][ T32] RAX: ffffffffffffffda RBX: 00007f2d46e16090 RCX: 00007f2d46b9aeb9 [ 638.348282][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 638.356567][ T32] RBP: 00007f2d46c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 638.364552][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.372958][ T32] R13: 00007f2d46e16128 R14: 00007f2d46e16090 R15: 00007fff61bf4218 [ 638.381457][ T32] [ 638.384674][ T32] [ 638.384674][ T32] Showing all locks held in the system: [ 638.486238][ T32] 1 lock held by khungtaskd/32: [ 638.491138][ T32] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 638.576420][ T32] 3 locks held by kworker/u8:6/1160: [ 638.581746][ T32] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 638.628381][ T32] #1: ffffc90003d2fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 638.666284][ T32] #2: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 638.675369][ T32] 2 locks held by getty/5580: [ 638.706299][ T32] #0: ffff88814dc4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 638.716144][ T32] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 638.776389][ T32] 2 locks held by syz-executor/5840: [ 638.781729][ T32] 4 locks held by kworker/1:4/5872: [ 638.832387][ T32] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 638.886291][ T32] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 638.895302][ T32] #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 638.940214][ T32] #3: ffffffff9a1d41c8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 638.976253][ T32] 5 locks held by kworker/u8:18/6483: [ 638.981669][ T32] #0: ffff88801b2df148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 639.046330][ T32] #1: ffffc9000b417bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 639.076224][ T32] #2: ffffffff8f99d790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 639.085626][ T32] #3: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 639.146223][ T32] #4: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 639.176650][ T32] 1 lock held by syz.6.522/8603: [ 639.181613][ T32] #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 639.193000][ T32] 1 lock held by syz.0.680/9361: [ 639.198889][ T32] #0: ffff88804c3ae0e0 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 639.209065][ T32] 2 locks held by syz-executor/10103: [ 639.214456][ T32] #0: ffffffff8f110dc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 639.228665][ T32] #1: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 639.242346][ T32] 2 locks held by syz-executor/10196: [ 639.247928][ T32] #0: ffffffff8f110dc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 639.257780][ T32] #1: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 639.273501][ T32] 2 locks held by syz-executor/10244: [ 639.279088][ T32] #0: ffffffff8f99d790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 639.296244][ T32] #1: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200 [ 639.305725][ T32] 4 locks held by syz.1.863/10406: [ 639.327330][ T32] #0: ffff8880348b8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 639.347143][ T32] #1: ffff8880348b80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 639.375255][ T32] #2: ffffffff8fb38868 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 639.389835][ T32] #3: ffff88807a59ab38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 639.399522][ T32] [ 639.401845][ T32] ============================================= [ 639.401845][ T32] [ 639.410644][ T32] NMI backtrace for cpu 1 [ 639.410666][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 639.410697][ T32] Tainted: [L]=SOFTLOCKUP [ 639.410706][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 639.410721][ T32] Call Trace: [ 639.410730][ T32] [ 639.410740][ T32] dump_stack_lvl+0xe8/0x150 [ 639.410775][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 639.410810][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.410845][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 639.410886][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 639.410923][ T32] sys_info+0x135/0x170 [ 639.410951][ T32] watchdog+0xf90/0xfe0 [ 639.410984][ T32] ? watchdog+0x209/0xfe0 [ 639.411019][ T32] kthread+0x726/0x8b0 [ 639.411060][ T32] ? __pfx_watchdog+0x10/0x10 [ 639.411085][ T32] ? __pfx_kthread+0x10/0x10 [ 639.411109][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.411143][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.411185][ T32] ? __pfx_kthread+0x10/0x10 [ 639.411214][ T32] ret_from_fork+0x51b/0xa40 [ 639.411255][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 639.411290][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.411318][ T32] ? __switch_to+0xc82/0x1410 [ 639.411356][ T32] ? __pfx_kthread+0x10/0x10 [ 639.411389][ T32] ret_from_fork_asm+0x1a/0x30 [ 639.411441][ T32] [ 639.411455][ T32] Sending NMI from CPU 1 to CPUs 0: [ 639.558402][ C0] NMI backtrace for cpu 0 [ 639.558426][ C0] CPU: 0 UID: 0 PID: 10425 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 639.558456][ C0] Tainted: [L]=SOFTLOCKUP [ 639.558464][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 639.558478][ C0] RIP: 0010:lock_acquire+0x8b/0x330 [ 639.558514][ C0] Code: 0f 84 ca 01 00 00 83 3d 52 fd 4e 0e 00 0f 84 d3 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 3c 4c 8c 00 83 3d 35 fd 4e 0e 00 <0f> 84 ce 00 00 00 65 8b 05 38 a8 52 11 85 c0 0f 85 bf 00 00 00 65 [ 639.558533][ C0] RSP: 0018:ffffc90003f3f3e0 EFLAGS: 00000202 [ 639.558552][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000002 [ 639.558567][ C0] RDX: 0000000000000000 RSI: ffffffff81776545 RDI: 1ffffffff1cab484 [ 639.558583][ C0] RBP: ffffffff81776528 R08: 0000000000000000 R09: 0000000000000000 [ 639.558597][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: 0000000000000002 [ 639.558612][ C0] R13: ffffffff8e55a420 R14: 0000000000000000 R15: 0000000000000000 [ 639.558629][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 639.558646][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.558661][ C0] CR2: 00007fe8f2c4e000 CR3: 0000000078dd6000 CR4: 0000000000350ef0 [ 639.558679][ C0] Call Trace: [ 639.558688][ C0] [ 639.558697][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.558731][ C0] ? __virt_addr_valid+0x1c8/0x5b0 [ 639.558760][ C0] __virt_addr_valid+0x1e5/0x5b0 [ 639.558788][ C0] ? __virt_addr_valid+0x1c8/0x5b0 [ 639.558816][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 639.558845][ C0] kasan_addr_to_slab+0xf/0x60 [ 639.558865][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 639.558892][ C0] kasan_record_aux_stack+0xf/0xd0 [ 639.558921][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 639.558947][ C0] call_rcu+0xee/0x890 [ 639.558977][ C0] kmem_cache_free+0x481/0x610 [ 639.558998][ C0] ? vms_complete_munmap_vmas+0x625/0x890 [ 639.559031][ C0] vms_complete_munmap_vmas+0x625/0x890 [ 639.559070][ C0] __mmap_complete+0x7b/0x610 [ 639.559104][ C0] mmap_region+0x141b/0x1f40 [ 639.559146][ C0] ? __pfx_mmap_region+0x10/0x10 [ 639.559239][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.559264][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.559296][ C0] ? security_mmap_addr+0x71/0x240 [ 639.559319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.559345][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.559370][ C0] ? shmem_mapping+0xd/0x50 [ 639.559395][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.559421][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 639.559451][ C0] do_mmap+0xc39/0x10c0 [ 639.559490][ C0] ? __pfx_do_mmap+0x10/0x10 [ 639.559518][ C0] ? down_write_killable+0x180/0x240 [ 639.559549][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 639.559577][ C0] ? apparmor_mmap_file+0x23e/0x2b0 [ 639.559602][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 639.559636][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 639.559666][ C0] ? __fget_files+0x2a/0x420 [ 639.559694][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.559719][ C0] ? __fget_files+0x3a0/0x420 [ 639.559742][ C0] ? __fget_files+0x2a/0x420 [ 639.559769][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 639.559806][ C0] do_syscall_64+0xe2/0xf80 [ 639.559830][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.559851][ C0] ? trace_irq_disable+0x37/0x100 [ 639.559878][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.559900][ C0] RIP: 0033:0x7fe8f2f77242 [ 639.559918][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 639.559936][ C0] RSP: 002b:00007fffa1d38a48 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 639.559958][ C0] RAX: ffffffffffffffda RBX: 00007fe8f2c46000 RCX: 00007fe8f2f77242 [ 639.559974][ C0] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 00007fe8f2c46000 [ 639.559988][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000002000 [ 639.560001][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fffa1d38a98 [ 639.560016][ C0] R13: 00007fe8f2c4e0c0 R14: 00007fffa1d38e80 R15: 00000ffff43a714c [ 639.560043][ C0] [ 639.984900][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 639.991766][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 640.002453][ T32] Tainted: [L]=SOFTLOCKUP [ 640.006805][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 640.016857][ T32] Call Trace: [ 640.020140][ T32] [ 640.023061][ T32] vpanic+0x1e0/0x670 [ 640.027051][ T32] panic+0xc5/0xd0 [ 640.030769][ T32] ? __pfx_panic+0x10/0x10 [ 640.035191][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.040924][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.046603][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 640.052082][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.057714][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 640.063969][ T32] watchdog+0xfda/0xfe0 [ 640.068136][ T32] ? watchdog+0x209/0xfe0 [ 640.072473][ T32] kthread+0x726/0x8b0 [ 640.076889][ T32] ? __pfx_watchdog+0x10/0x10 [ 640.081674][ T32] ? __pfx_kthread+0x10/0x10 [ 640.086363][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.092089][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.097292][ T32] ? __pfx_kthread+0x10/0x10 [ 640.101910][ T32] ret_from_fork+0x51b/0xa40 [ 640.106543][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 640.111757][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.117395][ T32] ? __switch_to+0xc82/0x1410 [ 640.122092][ T32] ? __pfx_kthread+0x10/0x10 [ 640.126691][ T32] ret_from_fork_asm+0x1a/0x30 [ 640.131486][ T32] [ 640.135147][ T32] Kernel Offset: disabled [ 640.139508][ T32] Rebooting in 86400 seconds..