last executing test programs: 5m57.065596044s ago: executing program 2 (id=138): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 5m54.794257614s ago: executing program 2 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m53.285218393s ago: executing program 2 (id=146): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x4, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r5, 0xe, "000500", "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"}}, 0x110) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e3", 0x18}], 0x1, &(0x7f0000000200)}}], 0x1, 0x20000800) 5m52.738501668s ago: executing program 5 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}, 0x200440c0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}, {&(0x7f0000000180)=""/207, 0xcf}], 0x2, 0x3c, 0x3) 5m51.359324075s ago: executing program 5 (id=152): syz_open_procfs(0x0, 0x0) r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m46.697278218s ago: executing program 5 (id=162): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, 0x24) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m43.460618504s ago: executing program 2 (id=170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x400000, 0x0, 0xe37, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3fffffffffc, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4a66, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x80000000000, 0x2000, 0x0, 0x0, 0x9]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) r7 = eventfd2(0x0, 0x0) poll(&(0x7f0000000080)=[{r7}], 0x1, 0xda90) 5m37.606204518s ago: executing program 2 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000000)=0x4) 5m36.42955525s ago: executing program 2 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5m35.117308762s ago: executing program 0 (id=182): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 5m29.477674487s ago: executing program 32 (id=162): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, 0x24) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m25.208538314s ago: executing program 0 (id=194): r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x8140) ioctl$TIOCSTI(r0, 0x5412, 0x0) 5m24.498936887s ago: executing program 0 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5m22.266694392s ago: executing program 0 (id=197): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getrlimit(0xf, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 5m20.850402075s ago: executing program 33 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5m20.228686254s ago: executing program 0 (id=200): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0xeeef5000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040), 0x0, 0x20000000}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 5m18.389971634s ago: executing program 0 (id=203): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) mount(&(0x7f00000001c0)=@rnullb, 0x0, &(0x7f0000000280)='binfmt_misc\x00', 0x5000, &(0x7f00000002c0)='\x00') r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x3, 0x6) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 5m2.938313424s ago: executing program 34 (id=203): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) mount(&(0x7f00000001c0)=@rnullb, 0x0, &(0x7f0000000280)='binfmt_misc\x00', 0x5000, &(0x7f00000002c0)='\x00') r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x3, 0x6) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 1m54.238838752s ago: executing program 3 (id=548): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r1) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fdb9df25"], 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0xc000) 1m53.877057024s ago: executing program 3 (id=549): socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x208000, 0x0) 1m53.418624641s ago: executing program 3 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m53.204192326s ago: executing program 3 (id=552): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffe1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) r5 = syz_open_procfs(0x0, &(0x7f000001a800)='net/xfrm_stat\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 1m49.789155457s ago: executing program 3 (id=558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r1) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01002dbd7000fdb9df2513"], 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0xc000) 1m49.469697314s ago: executing program 3 (id=562): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000001300)=""/153, 0x0, 0x44}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000240), 0x0, 0x4040081, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x88, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 1m33.888342757s ago: executing program 35 (id=562): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000001300)=""/153, 0x0, 0x44}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000240), 0x0, 0x4040081, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x88, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 21.677646372s ago: executing program 7 (id=716): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 18.057094638s ago: executing program 4 (id=723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2c8cdb9541e0f3f043318ec50ba60a91efb4af9fbbba003debfcc515b245d10196c15505bb1ed1dbc57f7fcf441efae852a2f5ec821954314e8193c3de5971406c8e572234716a70dc", 0x49}, {0x0}], 0x2, 0x0, 0x0, 0x20000080}], 0x1, 0x0) 17.659749474s ago: executing program 4 (id=724): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xd45, 0xc) 16.525016668s ago: executing program 7 (id=726): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 16.092266387s ago: executing program 7 (id=727): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='htcp\x00', 0x5) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="9c811ff5", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2eb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="fc00000000000000000100327d8000f8ff5df7a8d33f04bd9272af7d39df427a502239cb2b1a79787eab855297583ccd73c29474eab31641de2be80f1c63387954e7f9352479b9860843bd7a0758093a55fa6526d0de79e0b9c50204f74fbf0e01280398d65a3de037b5b4b37347cf997a169c19593ee9eec307cf6ece5557d728f5da20754b9024ec6b3e75afc4236315c96138753c816ef38ef0c54f0e182802b447d2e9f075b23c187cf92b49ad986073fa8e09eba75b51eeac3d87c047414ea3f53cc415d7c3c1afa7c71a9eca66bcbd8dc4ff014437475f996840e90a9ba890b60c8c46abb1d889bf5cb29ed83cc847fae9446bedc9", @ANYRES32=r1, @ANYBLOB="b22547926414ca173ef47a4ef08e1b905a875647a6ad0b4158e333e5087fa1f8c522d426e702a5c802c6ba36bac2d03d4362e5ce910420d703fe6ac1058140d608b4769d0d18217d351f69d3938bde4c7a37e13c4e96168f537bff2c8725712f26d0099aacd3d32daa5e244ddeb9ca268a7c74b0ac", @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000c6e7ecee57e360600000ea24", @ANYRES32=r5, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0920000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000", @ANYRES32=r5, @ANYBLOB="000011e564cc0000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.179179682s ago: executing program 4 (id=729): semop(0xffffffffffffffff, &(0x7f0000002ec0)=[{0x1, 0x200, 0x800}], 0x1) 13.774953588s ago: executing program 4 (id=730): socket(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xffffffefffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffbfffffff, 0x0, 0x8, 0x0, 0x7, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x100, 0x0, 0x7fff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0c0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10800000000003, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x9]}) 11.133671866s ago: executing program 8 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000004e2300000a00", @ANYRES32=0x0], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 9.76801061s ago: executing program 8 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) 8.327089891s ago: executing program 8 (id=736): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x60842, 0x4) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fcntl$setstatus(r0, 0x4, 0x42000) 8.135742988s ago: executing program 1 (id=737): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 7.579381453s ago: executing program 1 (id=738): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000016c0)={0x54, 0x0, &(0x7f00000015c0)=[@request_death={0x400c630e, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0}}], 0x0, 0x0, 0x0}) 6.387585865s ago: executing program 1 (id=739): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002cc0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40004) 5.927177395s ago: executing program 1 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r2], 0x378}}, 0x0) 5.601734524s ago: executing program 1 (id=741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b80)={'erspan0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeff9, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e07", 0xdd) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x6, &(0x7f0000001380)=0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) close(0x3) io_submit(r4, 0x1, &(0x7f0000000380)=[0x0]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x81, 0x2, 0xffffffff, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0x7, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x7ff, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x2, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x4, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x300006, 0x1, 0x101, 0x4, 0x1000005, 0x5f2e, 0x2d, 0x4e6, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x5, 0xfffffff9, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x5, 0x4, 0x81, 0x48c93690, 0x42, 0x3], [0x207, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x8000086, 0x2, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x6, 0x4000080, 0x3, 0x8000004, 0x2950bfaf, 0xffd, 0xa2, 0x7, 0xa9, 0x4005, 0x7, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x8000, 0x120000, 0xf55, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa61d, 0x2, 0x1, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x0, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x7, 0x9602, 0x8, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x7, 0x30b1d696, 0x0, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000e00)=[{r3, 0x8}], 0x1, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000056e000/0x3000)=nil, &(0x7f000056e000/0x2000)=nil, 0x4, 0x0, 0x0, 0xe, 0x0, 0x10, 0x1d, 0x58}) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 5.223652005s ago: executing program 7 (id=742): openat$ppp(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0xfffffffffffffea5, 0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xfffffffffffffd46) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r3, 0xffffffffffffffff, 0x0) 4.002364949s ago: executing program 7 (id=743): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0xeeef5000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040), 0x0, 0x20000000}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, 0x0) 3.97384279s ago: executing program 4 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000004e2300000a00", @ANYRES32=0x0], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 3.767121924s ago: executing program 8 (id=745): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2c8cdb9541e0f3f043318ec50ba60a91efb4af9fbbba003debfcc515b245d10196c15505bb1ed1dbc57f7fcf441efae852a2f5ec821954314e8193c3de5971406c8e572234716a70dc", 0x49}, {&(0x7f0000000380)}], 0x2, 0x0, 0x0, 0x20000080}], 0x1, 0x0) 3.766760581s ago: executing program 1 (id=746): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \''], 0xb8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 1.982956347s ago: executing program 4 (id=747): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0xe9, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@generic={0x1a, "09eddb0e2765687141e58c5ea64d8725a3e9b36d64adba4881e13f57c176588e083e5b773785cb4607c2068fd425c41b510222ca28132477ba58103fa969135fcd9e442b9683d5aeea1c33272efc186ece91ee05948c72fc2b74fed0b1557fadaaeb0e5f15191c7b62409b40a807c2656f5c968a34e82ab3982f9d253f09782376e7cb7f095986defbe3afe343d9ed098bdb6c95a6cac83d211a92fdcb8306e4fd219e7e1c43310eaa60105dcd7b482051095dc18c79b33c993a11c72cd8529763fb5c5e79023482dc250b9fe991ccf2bbdf837af543c9"}}}, &(0x7f0000000200)={0x1, 0x1, [0xd4, 0xcc6, 0xbfb, 0x848]}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4f37, 0x7, 0x10002, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x5, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3d, 0x8, 0x6, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r6, 0x6410) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[]) syz_io_uring_setup(0x2e3f, &(0x7f0000000440)={0x0, 0x8c43, 0x10100, 0x1, 0x4}, &(0x7f0000000400)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x35, 0x0, @fd=r0, 0x10, &(0x7f0000000340)}) 1.752978105s ago: executing program 7 (id=748): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) syz_clone(0x4600c91, 0x0, 0xfffffffffffffef6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8a441, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="44c394f305916c4516999da280", 0xd, 0x0, &(0x7f0000000440)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 1.67423493s ago: executing program 8 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 8 (id=750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x5c, r2, 0x20d, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty=0x7f000001}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) kernel console output (not intermixed with test programs): led state [ 341.080817][ T7256] bridge_slave_0: entered allmulticast mode [ 341.115678][ T7256] bridge_slave_0: entered promiscuous mode [ 341.667438][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.692238][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.724486][ T7256] bridge_slave_1: entered allmulticast mode [ 341.738641][ T7256] bridge_slave_1: entered promiscuous mode [ 342.141953][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.218705][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.517305][ T7088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.731630][ T7256] team0: Port device team_slave_0 added [ 342.839340][ T7088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.876787][ T7088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.925026][ T7256] team0: Port device team_slave_1 added [ 343.014860][ T7490] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 343.560053][ T7088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.370837][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.955057][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.054312][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.084988][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.102232][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.221967][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.294124][ T7088] kthread_run failed with err -4 [ 345.511933][ T7139] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 345.566698][ T7139] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 345.668230][ T7139] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 345.940938][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.950629][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.960235][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.973353][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.986073][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.015612][ T7139] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 346.251421][ T7256] hsr_slave_0: entered promiscuous mode [ 346.305752][ T7256] hsr_slave_1: entered promiscuous mode [ 346.334737][ T7256] debugfs: 'hsr0' already exists in 'hsr' [ 346.362775][ T7256] Cannot create hsr debugfs directory [ 348.043962][ T51] Bluetooth: hci1: command tx timeout [ 348.173929][ T6089] bridge_slave_1: left allmulticast mode [ 348.193859][ T6089] bridge_slave_1: left promiscuous mode [ 348.214473][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.262696][ T6089] bridge_slave_0: left allmulticast mode [ 348.268605][ T6089] bridge_slave_0: left promiscuous mode [ 348.289163][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.317266][ T6089] bridge_slave_1: left allmulticast mode [ 348.324032][ T6089] bridge_slave_1: left promiscuous mode [ 348.329960][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.340906][ T6089] bridge_slave_0: left allmulticast mode [ 348.347400][ T6089] bridge_slave_0: left promiscuous mode [ 348.353422][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.386810][ T6089] bridge_slave_1: left allmulticast mode [ 348.403088][ T6089] bridge_slave_1: left promiscuous mode [ 348.419414][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.448645][ T6089] bridge_slave_0: left allmulticast mode [ 348.469359][ T6089] bridge_slave_0: left promiscuous mode [ 348.497982][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.461733][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.524945][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.595958][ T6089] bond0 (unregistering): Released all slaves [ 350.014494][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.052729][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.078978][ T6089] bond0 (unregistering): Released all slaves [ 350.127098][ T51] Bluetooth: hci1: command tx timeout [ 350.581895][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.628512][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.665917][ T6089] bond0 (unregistering): Released all slaves [ 351.630727][ T6089] hsr_slave_0: left promiscuous mode [ 351.654947][ T6089] hsr_slave_1: left promiscuous mode [ 351.669699][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.680552][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.709382][ T6089] hsr_slave_0: left promiscuous mode [ 351.744849][ T6089] hsr_slave_1: left promiscuous mode [ 351.773001][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.821840][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.854630][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.864564][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.203763][ T51] Bluetooth: hci1: command tx timeout [ 352.451513][ T7551] loop1: detected capacity change from 0 to 40427 [ 352.489651][ T7551] F2FS-fs (loop1): invalid crc value [ 352.587440][ T7551] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 352.611850][ T7551] F2FS-fs (loop1): Start checkpoint disabled! [ 352.638352][ T7551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 352.921708][ T3068] kworker/u8:7: attempt to access beyond end of device [ 352.921708][ T3068] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 353.039799][ T7559] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 353.068891][ T36] kworker/u8:2: attempt to access beyond end of device [ 353.068891][ T36] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 353.138713][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 353.138769][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.138795][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 353.138863][ T36] Call Trace: [ 353.138874][ T36] [ 353.138889][ T36] dump_stack_lvl+0x16c/0x1f0 [ 353.138955][ T36] f2fs_handle_critical_error+0x624/0x9f0 [ 353.139008][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.139054][ T36] ? f2fs_build_fault_attr+0x53/0x1f0 [ 353.139118][ T36] f2fs_write_end_io+0x958/0xcf0 [ 353.139179][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 353.139238][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.139296][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 353.139347][ T36] bio_endio+0x713/0x860 [ 353.139416][ T36] submit_bio_noacct+0x306/0x1ed0 [ 353.139478][ T36] __submit_merged_bio+0x33c/0x770 [ 353.139539][ T36] __submit_merged_write_cond+0x319/0x3f0 [ 353.139608][ T36] f2fs_write_cache_pages+0x2067/0x2570 [ 353.139702][ T36] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 353.139770][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.139814][ T36] ? ieee80211_inform_bss+0x781/0x1140 [ 353.139871][ T36] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 353.139934][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.139978][ T36] ? rcu_is_watching+0x12/0xc0 [ 353.140053][ T36] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 353.140173][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.140217][ T36] ? f2fs_remove_dirty_inode+0x125/0x4f0 [ 353.140280][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.140333][ T36] f2fs_write_data_pages+0x4ad/0xd90 [ 353.140405][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 353.140479][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.140522][ T36] ? __lock_acquire+0xb97/0x1ce0 [ 353.140587][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 353.140650][ T36] do_writepages+0x27a/0x600 [ 353.140708][ T36] ? __pfx_do_writepages+0x10/0x10 [ 353.140754][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.140796][ T36] ? reacquire_held_locks+0xcd/0x1f0 [ 353.140853][ T36] ? writeback_sb_inodes+0x3b0/0xfa0 [ 353.140911][ T36] __writeback_single_inode+0x160/0xfb0 [ 353.140968][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 353.141017][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.141061][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 353.141107][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.141159][ T36] writeback_sb_inodes+0x60d/0xfa0 [ 353.141234][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 353.141285][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.141329][ T36] ? unwind_next_frame+0x3fe/0x20a0 [ 353.141444][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.141487][ T36] ? rcu_is_watching+0x12/0xc0 [ 353.141533][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.141577][ T36] ? queue_io+0x3f6/0x520 [ 353.141625][ T36] wb_writeback+0x419/0xb70 [ 353.141688][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 353.141734][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.141793][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.141837][ T36] ? mark_held_locks+0x49/0x80 [ 353.141904][ T36] wb_workfn+0x14d/0xbe0 [ 353.141963][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 353.142023][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 353.142086][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.142137][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.142188][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.142235][ T36] ? rcu_is_watching+0x12/0xc0 [ 353.142292][ T36] process_one_work+0x9cf/0x1b70 [ 353.142352][ T36] ? __pfx_fsnotify_connector_destroy_workfn+0x10/0x10 [ 353.142400][ T36] ? __pfx_process_one_work+0x10/0x10 [ 353.142442][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.142501][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.142545][ T36] ? assign_work+0x1a0/0x250 [ 353.142589][ T36] worker_thread+0x6c8/0xf10 [ 353.142656][ T36] ? __pfx_worker_thread+0x10/0x10 [ 353.142699][ T36] kthread+0x3c5/0x780 [ 353.142738][ T36] ? __pfx_kthread+0x10/0x10 [ 353.142779][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.142823][ T36] ? rcu_is_watching+0x12/0xc0 [ 353.142871][ T36] ? __pfx_kthread+0x10/0x10 [ 353.142911][ T36] ret_from_fork+0x56d/0x730 [ 353.142945][ T36] ? __pfx_kthread+0x10/0x10 [ 353.142984][ T36] ret_from_fork_asm+0x1a/0x30 [ 353.143060][ T36] [ 353.143081][ T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 353.876728][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 354.036090][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 354.289781][ T51] Bluetooth: hci1: command tx timeout [ 354.349141][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.360609][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.383965][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.425443][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.436941][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.898830][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 356.527836][ T51] Bluetooth: hci0: command tx timeout [ 356.942274][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 358.524945][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 358.600259][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 358.624007][ T51] Bluetooth: hci0: command tx timeout [ 360.645993][ T7507] chnl_net:caif_netlink_parms(): no params data found [ 360.683810][ T51] Bluetooth: hci0: command tx timeout [ 362.770051][ T51] Bluetooth: hci0: command tx timeout [ 363.630206][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.664271][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.679947][ T7507] bridge_slave_0: entered allmulticast mode [ 363.695791][ T7507] bridge_slave_0: entered promiscuous mode [ 363.708537][ T7256] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.778095][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.802002][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.824297][ T7507] bridge_slave_1: entered allmulticast mode [ 363.846154][ T7507] bridge_slave_1: entered promiscuous mode [ 363.865474][ T7256] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 364.070475][ T7256] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 364.446234][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.518320][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.646117][ T7256] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 364.857819][ T7560] chnl_net:caif_netlink_parms(): no params data found [ 364.928001][ T7507] team0: Port device team_slave_0 added [ 365.070754][ T7507] team0: Port device team_slave_1 added [ 365.492087][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.541193][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.636513][ T7507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.005509][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.058897][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.085437][ T7507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.181252][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.219360][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.246254][ T7560] bridge_slave_0: entered allmulticast mode [ 366.271493][ T7560] bridge_slave_0: entered promiscuous mode [ 366.359324][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.375293][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.405389][ T7560] bridge_slave_1: entered allmulticast mode [ 366.440546][ T7560] bridge_slave_1: entered promiscuous mode [ 366.852857][ T7649] loop4: detected capacity change from 0 to 40427 [ 366.925191][ T7649] F2FS-fs (loop4): invalid crc value [ 367.049653][ T7649] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 367.081793][ T7649] F2FS-fs (loop4): Start checkpoint disabled! [ 367.179958][ T7649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 368.065323][ T6427] kworker/u8:15: attempt to access beyond end of device [ 368.065323][ T6427] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 368.121033][ T6427] kworker/u8:15: attempt to access beyond end of device [ 368.121033][ T6427] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 368.163803][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 368.163862][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.163888][ T6427] Workqueue: writeback wb_workfn (flush-7:4) [ 368.163955][ T6427] Call Trace: [ 368.163968][ T6427] [ 368.163983][ T6427] dump_stack_lvl+0x16c/0x1f0 [ 368.164048][ T6427] f2fs_handle_critical_error+0x624/0x9f0 [ 368.164101][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.164149][ T6427] ? f2fs_build_fault_attr+0x53/0x1f0 [ 368.164205][ T6427] f2fs_write_end_io+0x958/0xcf0 [ 368.164266][ T6427] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 368.164327][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.164385][ T6427] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 368.164437][ T6427] bio_endio+0x713/0x860 [ 368.164505][ T6427] submit_bio_noacct+0x306/0x1ed0 [ 368.164569][ T6427] __submit_merged_bio+0x33c/0x770 [ 368.164629][ T6427] __submit_merged_write_cond+0x319/0x3f0 [ 368.164697][ T6427] f2fs_write_cache_pages+0x2067/0x2570 [ 368.164792][ T6427] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 368.164866][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.164912][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.164956][ T6427] ? find_held_lock+0x2b/0x80 [ 368.165007][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.165057][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.165101][ T6427] ? do_raw_spin_unlock+0x172/0x230 [ 368.165162][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.165206][ T6427] ? f2fs_available_free_memory+0x279/0xa30 [ 368.165330][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.165375][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.165419][ T6427] ? f2fs_remove_dirty_inode+0x125/0x4f0 [ 368.165482][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.165536][ T6427] f2fs_write_data_pages+0x4ad/0xd90 [ 368.165608][ T6427] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.165682][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.165727][ T6427] ? __lock_acquire+0xb97/0x1ce0 [ 368.165788][ T6427] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.165859][ T6427] do_writepages+0x27a/0x600 [ 368.165919][ T6427] ? __pfx_do_writepages+0x10/0x10 [ 368.165965][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.166009][ T6427] ? reacquire_held_locks+0xcd/0x1f0 [ 368.166069][ T6427] ? writeback_sb_inodes+0x3b0/0xfa0 [ 368.166128][ T6427] __writeback_single_inode+0x160/0xfb0 [ 368.166184][ T6427] ? __pfx___writeback_single_inode+0x10/0x10 [ 368.166234][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.166278][ T6427] ? do_raw_spin_unlock+0x172/0x230 [ 368.166320][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.166373][ T6427] writeback_sb_inodes+0x60d/0xfa0 [ 368.166451][ T6427] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 368.166500][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.166544][ T6427] ? find_held_lock+0x2b/0x80 [ 368.166667][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.166710][ T6427] ? rcu_is_watching+0x12/0xc0 [ 368.166758][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.166802][ T6427] ? queue_io+0x3f6/0x520 [ 368.166856][ T6427] wb_writeback+0x419/0xb70 [ 368.166920][ T6427] ? __pfx_wb_writeback+0x10/0x10 [ 368.166967][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167027][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167072][ T6427] ? mark_held_locks+0x49/0x80 [ 368.167140][ T6427] wb_workfn+0x14d/0xbe0 [ 368.167198][ T6427] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 368.167258][ T6427] ? __pfx_wb_workfn+0x10/0x10 [ 368.167315][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167365][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167416][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167460][ T6427] ? rcu_is_watching+0x12/0xc0 [ 368.167516][ T6427] process_one_work+0x9cf/0x1b70 [ 368.167583][ T6427] ? __pfx_process_one_work+0x10/0x10 [ 368.167626][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167684][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167728][ T6427] ? assign_work+0x1a0/0x250 [ 368.167773][ T6427] worker_thread+0x6c8/0xf10 [ 368.167827][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167883][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.167927][ T6427] ? __kthread_parkme+0x19e/0x250 [ 368.167981][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.168029][ T6427] ? __pfx_worker_thread+0x10/0x10 [ 368.168072][ T6427] kthread+0x3c5/0x780 [ 368.168112][ T6427] ? __pfx_kthread+0x10/0x10 [ 368.168152][ T6427] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.168197][ T6427] ? rcu_is_watching+0x12/0xc0 [ 368.168245][ T6427] ? __pfx_kthread+0x10/0x10 [ 368.168286][ T6427] ret_from_fork+0x56d/0x730 [ 368.168320][ T6427] ? __pfx_kthread+0x10/0x10 [ 368.168360][ T6427] ret_from_fork_asm+0x1a/0x30 [ 368.168435][ T6427] [ 368.168449][ T6427] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 368.694239][ T7560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.773290][ T7507] hsr_slave_0: entered promiscuous mode [ 368.795293][ T7507] hsr_slave_1: entered promiscuous mode [ 368.811957][ T7507] debugfs: 'hsr0' already exists in 'hsr' [ 368.830304][ T7507] Cannot create hsr debugfs directory [ 368.968057][ T7560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.315528][ T7560] team0: Port device team_slave_0 added [ 369.421627][ T7560] team0: Port device team_slave_1 added [ 369.719547][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.736737][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.792670][ T7560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.914580][ T7666] openvswitch: netlink: Unknown key attributes 1 [ 370.361982][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.399936][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.438319][ T7560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.687021][ T7560] hsr_slave_0: entered promiscuous mode [ 372.728132][ T7560] hsr_slave_1: entered promiscuous mode [ 372.762300][ T7560] debugfs: 'hsr0' already exists in 'hsr' [ 372.795922][ T7560] Cannot create hsr debugfs directory [ 373.100806][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.114202][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.122752][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.134556][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.142657][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.412174][ T7687] loop4: detected capacity change from 0 to 1024 [ 373.701065][ T7687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.734176][ T7687] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 373.950606][ T7687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.202628][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.062896][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 375.164178][ T51] Bluetooth: hci4: command tx timeout [ 376.345862][ T1006] bridge_slave_1: left allmulticast mode [ 376.351552][ T1006] bridge_slave_1: left promiscuous mode [ 376.385080][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.422336][ T1006] bridge_slave_0: left allmulticast mode [ 376.443705][ T1006] bridge_slave_0: left promiscuous mode [ 376.449881][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.719117][ T1006] bridge_slave_1: left allmulticast mode [ 376.724913][ T1006] bridge_slave_1: left promiscuous mode [ 376.730724][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.771664][ T1006] bridge_slave_0: left allmulticast mode [ 376.785094][ T1006] bridge_slave_0: left promiscuous mode [ 376.804128][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.248799][ T51] Bluetooth: hci4: command tx timeout [ 379.325547][ T51] Bluetooth: hci4: command tx timeout [ 379.446166][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.513808][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.535106][ T1006] bond0 (unregistering): Released all slaves [ 379.603798][ T7724] loop3: detected capacity change from 0 to 1024 [ 379.611454][ T7724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.643876][ T7724] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.946677][ T7729] openvswitch: netlink: Unknown key attributes 1 [ 380.006006][ T7724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.464500][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.593450][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.513610][ T51] Bluetooth: hci4: command tx timeout [ 381.711357][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.750798][ T1006] bond0 (unregistering): Released all slaves [ 382.470966][ T1006] hsr_slave_0: left promiscuous mode [ 382.512547][ T1006] hsr_slave_1: left promiscuous mode [ 382.525420][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.587614][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.725304][ T1006] hsr_slave_0: left promiscuous mode [ 382.976117][ T1006] hsr_slave_1: left promiscuous mode [ 382.983096][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.141312][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.964395][ T7757] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 385.000095][ T7757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.609384][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 385.761881][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 386.871193][ T7765] loop1: detected capacity change from 0 to 1024 [ 386.907689][ T7765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.945145][ T7765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 387.097809][ T7765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.352205][ T5881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.936427][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 388.293200][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.299943][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.518505][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 391.318736][ T7507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 391.496461][ T7797] loop3: detected capacity change from 0 to 1024 [ 391.587484][ T7797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 391.630747][ T7797] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.634394][ T7507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 391.716056][ T7507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.120821][ T7805] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 2: comm syz.3.475: lblock 2 mapped to illegal pblock 2 (length 4) [ 392.181495][ T7507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.362040][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 393.834409][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 393.914117][ T7560] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 394.844623][ T7560] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 395.245371][ T7560] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 395.271302][ T7560] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 395.402733][ T7834] block nbd4: Attempted send on invalid socket [ 395.420984][ T7834] blk_print_req_error: 2 callbacks suppressed [ 395.421009][ T7834] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.456342][ T7834] block nbd4: Attempted send on invalid socket [ 395.472020][ T7834] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.502431][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.511952][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 395.531149][ T7834] block nbd4: Attempted send on invalid socket [ 395.538224][ T7834] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.550884][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 395.592794][ T7834] block nbd4: Attempted send on invalid socket [ 395.599423][ T7834] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.615894][ T7834] block nbd4: Attempted send on invalid socket [ 395.622720][ T7834] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.634709][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 395.648861][ T7834] block nbd4: Attempted send on invalid socket [ 395.656858][ T7834] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.673657][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 395.705763][ T7834] block nbd4: Attempted send on invalid socket [ 395.712239][ T7834] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.731520][ T7834] block nbd4: Attempted send on invalid socket [ 395.738189][ T7834] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.751944][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 395.877437][ T7834] block nbd4: Attempted send on invalid socket [ 395.884969][ T7834] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.903131][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 395.948112][ T7834] block nbd4: Attempted send on invalid socket [ 395.955341][ T7834] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.987582][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 396.007044][ T7834] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 396.017499][ T7834] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 396.473494][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.503086][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.549101][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 397.063931][ T7683] bridge_slave_0: entered allmulticast mode [ 397.462662][ T7683] bridge_slave_0: entered promiscuous mode [ 397.682979][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.699249][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.931996][ T7683] bridge_slave_1: entered allmulticast mode [ 397.941235][ T7683] bridge_slave_1: entered promiscuous mode [ 397.993033][ T7507] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.408210][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.430755][ T7857] loop3: detected capacity change from 0 to 1024 [ 399.489712][ T7857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 399.528828][ T7857] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.586629][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.593948][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.858207][ T7864] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 2: comm syz.3.486: lblock 2 mapped to illegal pblock 2 (length 4) [ 399.860925][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.298467][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.306094][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.386210][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 400.485128][ T7683] team0: Port device team_slave_0 added [ 401.717138][ T7683] team0: Port device team_slave_1 added [ 401.843796][ T7863] IPVS: length: 73 != 24 [ 402.049180][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.076056][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.102054][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.145809][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.296137][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.309534][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.352387][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.732242][ T7683] hsr_slave_0: entered promiscuous mode [ 402.818214][ T7683] hsr_slave_1: entered promiscuous mode [ 403.164172][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 403.468561][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.522148][ T1006] bridge_slave_1: left allmulticast mode [ 403.538603][ T1006] bridge_slave_1: left promiscuous mode [ 403.560216][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.604636][ T1006] bridge_slave_0: left allmulticast mode [ 403.610427][ T1006] bridge_slave_0: left promiscuous mode [ 403.771109][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.842390][ T7905] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 406.248661][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.355600][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.329983][ T1006] bond0 (unregistering): Released all slaves [ 407.377118][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.388781][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.407471][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.417731][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.426816][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.068168][ T1006] hsr_slave_0: left promiscuous mode [ 408.088506][ T1006] hsr_slave_1: left promiscuous mode [ 408.105372][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.149902][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.220077][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 409.487143][ T5868] Bluetooth: hci1: command tx timeout [ 411.443494][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 411.481884][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 411.564985][ T5868] Bluetooth: hci1: command tx timeout [ 412.985043][ T7560] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.020904][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.028159][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.521786][ T7953] nbd_handle_cmd: 2 callbacks suppressed [ 413.521827][ T7953] block nbd3: Attempted send on invalid socket [ 413.565168][ T7953] blk_print_req_error: 2 callbacks suppressed [ 413.565199][ T7953] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.653783][ T5868] Bluetooth: hci1: command tx timeout [ 413.674853][ T7953] block nbd3: Attempted send on invalid socket [ 413.681111][ T7953] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.781121][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 413.923947][ T7953] block nbd3: Attempted send on invalid socket [ 413.952400][ T7953] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.020762][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 414.055769][ T7953] block nbd3: Attempted send on invalid socket [ 414.067516][ T7953] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.077510][ T7953] block nbd3: Attempted send on invalid socket [ 414.083880][ T7953] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.094112][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 414.104113][ T7953] block nbd3: Attempted send on invalid socket [ 414.110374][ T7953] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.131849][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.154013][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.174104][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.183041][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 414.195884][ T7953] block nbd3: Attempted send on invalid socket [ 414.202330][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.216323][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.226982][ T7953] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.305091][ T7953] block nbd3: Attempted send on invalid socket [ 414.376994][ T7953] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.404413][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 414.505374][ T7953] block nbd3: Attempted send on invalid socket [ 414.530567][ T7953] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.593900][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 414.610183][ T7953] block nbd3: Attempted send on invalid socket [ 414.654000][ T7953] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.692787][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 414.713966][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 414.747145][ T7953] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 415.016422][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 415.783698][ T51] Bluetooth: hci1: command tx timeout [ 416.287020][ T51] Bluetooth: hci6: command tx timeout [ 416.428052][ T7913] chnl_net:caif_netlink_parms(): no params data found [ 417.701265][ T7973] loop3: detected capacity change from 0 to 40427 [ 417.735266][ T7973] F2FS-fs (loop3): invalid crc value [ 417.814927][ T7973] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 417.824716][ T7973] F2FS-fs (loop3): Start checkpoint disabled! [ 417.854750][ T7973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 418.863741][ T51] Bluetooth: hci6: command tx timeout [ 420.605197][ T6073] kworker/u8:10: attempt to access beyond end of device [ 420.605197][ T6073] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 420.671364][ T6073] kworker/u8:10: attempt to access beyond end of device [ 420.671364][ T6073] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 420.712517][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 420.712570][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.712596][ T6073] Workqueue: writeback wb_workfn (flush-7:3) [ 420.712663][ T6073] Call Trace: [ 420.712675][ T6073] [ 420.712690][ T6073] dump_stack_lvl+0x16c/0x1f0 [ 420.712754][ T6073] f2fs_handle_critical_error+0x624/0x9f0 [ 420.712808][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.712855][ T6073] ? f2fs_build_fault_attr+0x53/0x1f0 [ 420.712910][ T6073] f2fs_write_end_io+0x958/0xcf0 [ 420.712970][ T6073] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 420.713032][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.713090][ T6073] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 420.713148][ T6073] bio_endio+0x713/0x860 [ 420.713221][ T6073] submit_bio_noacct+0x306/0x1ed0 [ 420.713286][ T6073] __submit_merged_bio+0x33c/0x770 [ 420.713348][ T6073] __submit_merged_write_cond+0x319/0x3f0 [ 420.713418][ T6073] f2fs_write_cache_pages+0x2067/0x2570 [ 420.713519][ T6073] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 420.713586][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.713636][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.713676][ T6073] ? find_held_lock+0x2b/0x80 [ 420.713715][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.713754][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.713788][ T6073] ? do_raw_spin_unlock+0x172/0x230 [ 420.713836][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.713872][ T6073] ? f2fs_available_free_memory+0x279/0xa30 [ 420.713970][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714004][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714038][ T6073] ? f2fs_remove_dirty_inode+0x125/0x4f0 [ 420.714087][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714134][ T6073] f2fs_write_data_pages+0x4ad/0xd90 [ 420.714190][ T6073] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 420.714248][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714282][ T6073] ? __lock_acquire+0xb97/0x1ce0 [ 420.714330][ T6073] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 420.714380][ T6073] do_writepages+0x27a/0x600 [ 420.714426][ T6073] ? __pfx_do_writepages+0x10/0x10 [ 420.714462][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714500][ T6073] ? reacquire_held_locks+0xcd/0x1f0 [ 420.714546][ T6073] ? writeback_sb_inodes+0x3b0/0xfa0 [ 420.714592][ T6073] __writeback_single_inode+0x160/0xfb0 [ 420.714636][ T6073] ? __pfx___writeback_single_inode+0x10/0x10 [ 420.714675][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714709][ T6073] ? do_raw_spin_unlock+0x172/0x230 [ 420.714741][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714783][ T6073] writeback_sb_inodes+0x60d/0xfa0 [ 420.714844][ T6073] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 420.714885][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.714923][ T6073] ? mark_held_locks+0x49/0x80 [ 420.715026][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715060][ T6073] ? rcu_is_watching+0x12/0xc0 [ 420.715097][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715135][ T6073] ? queue_io+0x3f6/0x520 [ 420.715173][ T6073] wb_writeback+0x419/0xb70 [ 420.715223][ T6073] ? __pfx_wb_writeback+0x10/0x10 [ 420.715259][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715305][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715339][ T6073] ? mark_held_locks+0x49/0x80 [ 420.715391][ T6073] wb_workfn+0x14d/0xbe0 [ 420.715437][ T6073] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 420.715484][ T6073] ? __pfx_wb_workfn+0x10/0x10 [ 420.715528][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715566][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715606][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715639][ T6073] ? rcu_is_watching+0x12/0xc0 [ 420.715683][ T6073] process_one_work+0x9cf/0x1b70 [ 420.715734][ T6073] ? __pfx_process_one_work+0x10/0x10 [ 420.715770][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715827][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715869][ T6073] ? assign_work+0x1a0/0x250 [ 420.715905][ T6073] worker_thread+0x6c8/0xf10 [ 420.715947][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.715983][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.716017][ T6073] ? __kthread_parkme+0x19e/0x250 [ 420.716060][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.716098][ T6073] ? __pfx_worker_thread+0x10/0x10 [ 420.716134][ T6073] kthread+0x3c5/0x780 [ 420.716164][ T6073] ? __pfx_kthread+0x10/0x10 [ 420.716196][ T6073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.716230][ T6073] ? rcu_is_watching+0x12/0xc0 [ 420.716267][ T6073] ? __pfx_kthread+0x10/0x10 [ 420.716298][ T6073] ret_from_fork+0x56d/0x730 [ 420.716325][ T6073] ? __pfx_kthread+0x10/0x10 [ 420.716355][ T6073] ret_from_fork_asm+0x1a/0x30 [ 420.716414][ T6073] [ 421.189441][ T51] Bluetooth: hci6: command tx timeout [ 421.211005][ T6073] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 421.362300][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.369779][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.382825][ T7913] bridge_slave_0: entered allmulticast mode [ 421.392781][ T7913] bridge_slave_0: entered promiscuous mode [ 421.438518][ T7683] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.449838][ T7683] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 421.461020][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.468331][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.475723][ T7913] bridge_slave_1: entered allmulticast mode [ 421.483773][ T7913] bridge_slave_1: entered promiscuous mode [ 421.521451][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.535552][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.576616][ T7913] team0: Port device team_slave_0 added [ 421.585802][ T7913] team0: Port device team_slave_1 added [ 421.621416][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.629793][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.655887][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.669365][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.677070][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.735257][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.772546][ T7683] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 421.895078][ T7683] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 422.246760][ T7957] chnl_net:caif_netlink_parms(): no params data found [ 422.356384][ T7913] hsr_slave_0: entered promiscuous mode [ 422.395223][ T7913] hsr_slave_1: entered promiscuous mode [ 422.402375][ T7913] debugfs: 'hsr0' already exists in 'hsr' [ 422.413636][ T7913] Cannot create hsr debugfs directory [ 422.927438][ T1006] bridge_slave_1: left allmulticast mode [ 422.941926][ T1006] bridge_slave_1: left promiscuous mode [ 422.948448][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.996663][ T1006] bridge_slave_0: left allmulticast mode [ 423.002331][ T1006] bridge_slave_0: left promiscuous mode [ 423.011765][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.246415][ T5868] Bluetooth: hci6: command tx timeout [ 423.648834][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.712143][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.752593][ T1006] bond0 (unregistering): Released all slaves [ 424.085966][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.093958][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.127669][ T7957] bridge_slave_0: entered allmulticast mode [ 424.148147][ T7957] bridge_slave_0: entered promiscuous mode [ 424.283411][ T1006] hsr_slave_0: left promiscuous mode [ 424.343971][ T1006] hsr_slave_1: left promiscuous mode [ 424.366668][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.409439][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.650833][ T8006] nbd_handle_cmd: 2 callbacks suppressed [ 424.650859][ T8006] block nbd1: Attempted send on invalid socket [ 424.662914][ T8006] blk_print_req_error: 2 callbacks suppressed [ 424.662934][ T8006] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 424.679197][ T8006] block nbd1: Attempted send on invalid socket [ 424.685535][ T8006] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 424.694995][ T8006] Mount JFS Failure: -5 [ 425.628321][ T8015] block nbd1: Attempted send on invalid socket [ 425.646429][ T8015] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.687891][ T8015] block nbd1: Attempted send on invalid socket [ 425.714568][ T8015] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.763399][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 425.797495][ T8015] block nbd1: Attempted send on invalid socket [ 425.804138][ T8015] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.813763][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 425.852804][ T8015] block nbd1: Attempted send on invalid socket [ 425.859440][ T8015] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.876005][ T8015] block nbd1: Attempted send on invalid socket [ 425.882264][ T8015] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.894120][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 425.909147][ T8015] block nbd1: Attempted send on invalid socket [ 425.915491][ T8015] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.931096][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 425.958796][ T8015] block nbd1: Attempted send on invalid socket [ 425.965655][ T8015] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.980906][ T8015] block nbd1: Attempted send on invalid socket [ 425.987514][ T8015] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.000689][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 426.017601][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 426.060185][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 426.076856][ T8015] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 426.086851][ T8015] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 427.726842][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 429.080768][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 432.169010][ T8054] nbd_handle_cmd: 4 callbacks suppressed [ 432.169044][ T8054] block nbd4: Attempted send on invalid socket [ 432.214487][ T8054] blk_print_req_error: 4 callbacks suppressed [ 432.214511][ T8054] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.258804][ T8054] block nbd4: Attempted send on invalid socket [ 432.291605][ T8054] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.418467][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 432.475406][ T8054] block nbd4: Attempted send on invalid socket [ 432.483266][ T8054] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.497023][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 432.516120][ T8054] block nbd4: Attempted send on invalid socket [ 432.531678][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.571691][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.580155][ T8054] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.603926][ T7957] bridge_slave_1: entered allmulticast mode [ 432.648566][ T8054] block nbd4: Attempted send on invalid socket [ 432.655287][ T7957] bridge_slave_1: entered promiscuous mode [ 432.709464][ T8054] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.783448][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 432.847738][ T8054] block nbd4: Attempted send on invalid socket [ 432.855549][ T8054] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.865807][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 432.879427][ T8054] block nbd4: Attempted send on invalid socket [ 432.886207][ T8054] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.904396][ T8054] block nbd4: Attempted send on invalid socket [ 432.910759][ T8054] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.920688][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 432.930725][ T8054] block nbd4: Attempted send on invalid socket [ 432.936980][ T8054] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.947193][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 432.961444][ T8054] block nbd4: Attempted send on invalid socket [ 432.967922][ T8054] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.019228][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 433.189567][ T8054] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 433.249120][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.264799][ T8054] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 433.340086][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.350539][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.359769][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.371993][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.384789][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.393978][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.561983][ T8062] openvswitch: netlink: Unknown key attributes 1 [ 434.050778][ T7957] team0: Port device team_slave_0 added [ 434.108177][ T7957] team0: Port device team_slave_1 added [ 435.499154][ T5868] Bluetooth: hci0: command tx timeout [ 435.941393][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.949184][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.995140][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.008669][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.015844][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.044650][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.124172][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 436.925811][ T7957] hsr_slave_0: entered promiscuous mode [ 436.961664][ T7957] hsr_slave_1: entered promiscuous mode [ 437.064255][ T7957] debugfs: 'hsr0' already exists in 'hsr' [ 437.201734][ T7957] Cannot create hsr debugfs directory [ 437.574179][ T5868] Bluetooth: hci0: command tx timeout [ 438.225098][ T8094] blk_print_req_error: 2 callbacks suppressed [ 438.225128][ T8094] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.271595][ T8094] exFAT-fs (loop3): unable to read boot sector [ 438.294733][ T8094] exFAT-fs (loop3): failed to read boot sector [ 438.317960][ T8094] exFAT-fs (loop3): failed to recognize exfat type [ 439.668224][ T5868] Bluetooth: hci0: command tx timeout [ 440.091647][ T7913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.131571][ T7913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 440.484066][ T7913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.091876][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 441.339218][ T7913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.743854][ T5868] Bluetooth: hci0: command tx timeout [ 442.711525][ T8135] nbd_handle_cmd: 2 callbacks suppressed [ 442.711557][ T8135] block nbd4: Attempted send on invalid socket [ 442.725137][ T8135] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 442.734771][ T8135] block nbd4: Attempted send on invalid socket [ 442.740946][ T8135] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 442.750362][ T8135] Mount JFS Failure: -5 [ 442.844275][ T6057] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 442.912086][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.931878][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.943193][ T8060] bridge_slave_0: entered allmulticast mode [ 442.967416][ T8060] bridge_slave_0: entered promiscuous mode [ 443.004202][ T6057] usb 2-1: Using ep0 maxpacket: 32 [ 443.014192][ T6057] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 443.025533][ T6057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.055978][ T6057] usb 2-1: config 0 descriptor?? [ 443.132424][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.159785][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.169165][ T8060] bridge_slave_1: entered allmulticast mode [ 443.191665][ T8060] bridge_slave_1: entered promiscuous mode [ 443.311630][ T6057] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 443.336758][ T6057] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 443.371561][ T6057] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 443.389354][ T6057] usb 2-1: media controller created [ 443.815257][ T8148] Bluetooth: MGMT ver 1.23 [ 443.875103][ T6057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.722198][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.779402][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.823714][ T6057] az6027: usb out operation failed. (-71) [ 444.831085][ T6057] az6027: usb out operation failed. (-71) [ 444.844063][ T6057] stb0899_attach: Driver disabled by Kconfig [ 444.850083][ T6057] az6027: no front-end attached [ 444.850083][ T6057] [ 444.868010][ T6057] az6027: usb out operation failed. (-71) [ 444.883667][ T6057] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 444.903440][ T6057] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 444.934287][ T6057] dvb-usb: schedule remote query interval to 400 msecs. [ 444.973722][ T6057] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 445.029979][ T6057] usb 2-1: USB disconnect, device number 3 [ 445.133915][ T3068] bridge_slave_1: left allmulticast mode [ 445.151446][ T3068] bridge_slave_1: left promiscuous mode [ 445.172437][ T3068] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.202638][ T3068] bridge_slave_0: left allmulticast mode [ 445.323107][ T3068] bridge_slave_0: left promiscuous mode [ 445.343834][ T3068] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.062497][ T6057] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 446.177294][ T3068] bridge_slave_1: left allmulticast mode [ 446.217510][ T3068] bridge_slave_1: left promiscuous mode [ 446.254195][ T3068] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.341144][ T8139] infiniband syz2: set active [ 446.369449][ T8139] infiniband syz2: added bond_slave_0 [ 446.405318][ T8139] syz2: rxe_create_cq: returned err = -12 [ 446.422925][ T8139] infiniband syz2: Couldn't create ib_mad CQ [ 446.435773][ T8139] infiniband syz2: Couldn't open port 1 [ 446.592366][ T8139] RDS/IB: syz2: added [ 446.601297][ T8139] smc: adding ib device syz2 with port count 1 [ 446.608313][ T8139] smc: ib device syz2 port 1 has pnetid [ 446.632114][ T3068] bridge_slave_0: left allmulticast mode [ 448.314241][ T3068] bridge_slave_0: left promiscuous mode [ 448.937523][ T8159] Set syz1 is full, maxelem 65536 reached [ 449.093977][ T3068] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.281969][ T8168] md: md2 stopped. [ 449.731726][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.760625][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.434659][ T3068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.493289][ T3068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.511694][ T3068] bond0 (unregistering): Released all slaves [ 451.726042][ T3068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.746341][ T3068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.765802][ T3068] bond0 (unregistering): Released all slaves [ 451.871113][ T8060] team0: Port device team_slave_0 added [ 452.087828][ T8060] team0: Port device team_slave_1 added [ 452.505822][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.553711][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.569984][ T8186] block nbd4: Attempted send on invalid socket [ 452.590320][ T8186] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.638989][ T8186] block nbd4: Attempted send on invalid socket [ 452.646357][ T8186] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.653777][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.798663][ T7957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 452.906323][ T8186] Mount JFS Failure: -5 [ 453.129583][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.240022][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.343638][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.372956][ T7957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 453.403064][ T8191] block nbd1: Attempted send on invalid socket [ 453.410003][ T8191] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.424420][ T8191] block nbd1: Attempted send on invalid socket [ 453.430735][ T8191] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.441063][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 453.459154][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.496842][ T8191] block nbd1: Attempted send on invalid socket [ 453.503297][ T8191] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.569037][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 453.600924][ T8191] block nbd1: Attempted send on invalid socket [ 453.607926][ T8191] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.628373][ T8191] block nbd1: Attempted send on invalid socket [ 453.634896][ T8191] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.648864][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 453.663880][ T8191] block nbd1: Attempted send on invalid socket [ 453.670505][ T8191] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.690616][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 453.732415][ T8191] block nbd1: Attempted send on invalid socket [ 453.739406][ T8191] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.759130][ T8191] block nbd1: Attempted send on invalid socket [ 453.766226][ T8191] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.786147][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 453.805378][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 453.856864][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 453.870145][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 453.880517][ T8191] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 454.017700][ T7957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 455.205701][ T7957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 455.468107][ T8200] openvswitch: netlink: Unknown key attributes 1 [ 455.922456][ T8060] hsr_slave_0: entered promiscuous mode [ 455.935924][ T8060] hsr_slave_1: entered promiscuous mode [ 455.956429][ T8060] debugfs: 'hsr0' already exists in 'hsr' [ 455.962251][ T8060] Cannot create hsr debugfs directory [ 456.088911][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.728188][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.735371][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.854712][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.861940][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.312976][ T7913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.569889][ T8237] block nbd1: shutting down sockets [ 459.681183][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.827482][ T7957] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.946652][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.953928][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.098903][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.111173][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.122228][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.132188][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.142451][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.213826][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.221099][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.811581][ T8060] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 461.027236][ T8060] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 461.073290][ T8060] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 461.124977][ T8060] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 461.372953][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.213764][ T5868] Bluetooth: hci4: command tx timeout [ 462.320262][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.442873][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.557071][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.564448][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.621387][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.628679][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.629262][ T8275] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.673666][ T5934] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 462.682486][ T8275] block device autoloading is deprecated and will be removed. [ 462.880058][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 463.359964][ T5934] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 463.382255][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.386665][ T7957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.417285][ T5934] usb 2-1: config 0 descriptor?? [ 463.663933][ T5934] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 463.685364][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.756616][ T5934] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 463.773646][ T5934] usb 2-1: media controller created [ 464.158795][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.297346][ T5868] Bluetooth: hci4: command tx timeout [ 464.921237][ T5934] az6027: usb out operation failed. (-71) [ 464.965152][ T5934] az6027: usb out operation failed. (-71) [ 464.970934][ T5934] stb0899_attach: Driver disabled by Kconfig [ 465.028270][ T5934] az6027: no front-end attached [ 465.028270][ T5934] [ 465.056447][ T5934] az6027: usb out operation failed. (-71) [ 465.065505][ T7913] veth0_vlan: entered promiscuous mode [ 465.073573][ T5934] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 465.116001][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 465.121981][ T7913] veth1_vlan: entered promiscuous mode [ 465.194760][ T5934] dvb-usb: schedule remote query interval to 400 msecs. [ 465.225256][ T5934] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 465.308911][ T5934] usb 2-1: USB disconnect, device number 4 [ 465.348533][ T7913] veth0_macvtap: entered promiscuous mode [ 466.318027][ T8295] block nbd4: shutting down sockets [ 466.375502][ T5868] Bluetooth: hci4: command tx timeout [ 466.479765][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.544793][ T5934] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 466.899311][ T7957] veth0_vlan: entered promiscuous mode [ 466.976029][ T7957] veth1_vlan: entered promiscuous mode [ 467.624852][ T7957] veth0_macvtap: entered promiscuous mode [ 467.725514][ T7957] veth1_macvtap: entered promiscuous mode [ 467.999155][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.069530][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.156971][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.284413][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.303965][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.313049][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.433214][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.444646][ T5867] Bluetooth: hci4: command tx timeout [ 468.450228][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.472693][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.495787][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.510120][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.048255][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.114424][ T8326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.136091][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.532324][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.580652][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.617306][ T51] Bluetooth: hci1: command tx timeout [ 470.669470][ T8060] veth0_vlan: entered promiscuous mode [ 470.691184][ T8060] veth1_vlan: entered promiscuous mode [ 470.812782][ T8060] veth0_macvtap: entered promiscuous mode [ 470.866325][ T8060] veth1_macvtap: entered promiscuous mode [ 470.948435][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.025093][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.073630][ T6016] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.082463][ T6016] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.424279][ T6016] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.482096][ T6016] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.625181][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.199'. [ 472.162325][ T8344] 8021q: VLANs not supported on ip6gre0 [ 472.326659][ T8336] block nbd1: shutting down sockets [ 472.685635][ T51] Bluetooth: hci1: command tx timeout [ 472.718343][ T8348] md: md2 stopped. [ 473.225595][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.503876][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.829325][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.868680][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.170940][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 474.767607][ T51] Bluetooth: hci1: command tx timeout [ 476.863717][ T51] Bluetooth: hci1: command tx timeout [ 477.158874][ T8380] nbd_handle_cmd: 4 callbacks suppressed [ 477.158915][ T8380] block nbd4: Attempted send on invalid socket [ 477.193761][ T8380] blk_print_req_error: 4 callbacks suppressed [ 477.193790][ T8380] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.204567][ T8381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 477.271766][ T8381] block device autoloading is deprecated and will be removed. [ 477.803117][ T8380] block nbd4: Send control failed (result -32) [ 477.812126][ T5934] IPVS: starting estimator thread 0... [ 477.817952][ T8380] block nbd4: Request send failed, requeueing [ 477.867312][ T6040] block nbd4: Dead connection, failed to find a fallback [ 477.884863][ T6040] block nbd4: shutting down sockets [ 477.890267][ T6040] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.902638][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 477.924318][ T8384] IPVS: using max 20 ests per chain, 48000 per kthread [ 477.982048][ T8380] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.094077][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.130389][ T8380] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.153639][ T8380] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.172904][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 478.185462][ T8380] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.198611][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.234597][ T8380] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.249256][ T8380] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.267567][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 478.281602][ T8380] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.293623][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.329225][ T8380] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.351656][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 478.373955][ T8380] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.387253][ T8380] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 479.546891][ T5934] IPVS: starting estimator thread 0... [ 480.535137][ T8398] IPVS: using max 22 ests per chain, 52800 per kthread [ 481.887909][ T8411] netlink: 'syz.8.627': attribute type 11 has an invalid length. [ 482.043809][ T8404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.644076][ T8416] md: md2 stopped. [ 483.856436][ T8423] loop1: detected capacity change from 0 to 40427 [ 483.867500][ T8423] F2FS-fs (loop1): invalid crc value [ 483.963059][ T8423] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 483.972778][ T8423] F2FS-fs (loop1): Start checkpoint disabled! [ 483.997090][ T8423] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 484.544303][ T6089] kworker/u8:13: attempt to access beyond end of device [ 484.544303][ T6089] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.957371][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 484.957424][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.957450][ T6089] Workqueue: writeback wb_workfn (flush-7:1) [ 484.957515][ T6089] Call Trace: [ 484.957527][ T6089] [ 484.957542][ T6089] dump_stack_lvl+0x16c/0x1f0 [ 484.957604][ T6089] f2fs_handle_critical_error+0x624/0x9f0 [ 484.957659][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.957706][ T6089] ? f2fs_build_fault_attr+0x53/0x1f0 [ 484.957762][ T6089] f2fs_write_end_io+0x958/0xcf0 [ 484.957822][ T6089] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 484.957884][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.957965][ T6089] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 484.958018][ T6089] bio_endio+0x713/0x860 [ 484.958087][ T6089] submit_bio_noacct+0x306/0x1ed0 [ 484.958152][ T6089] __submit_merged_bio+0x33c/0x770 [ 484.958212][ T6089] __submit_merged_write_cond+0x319/0x3f0 [ 484.958286][ T6089] f2fs_write_cache_pages+0x2067/0x2570 [ 484.958384][ T6089] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 484.958451][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.958496][ T6089] ? mark_held_locks+0x49/0x80 [ 484.958557][ T6089] ? finish_task_switch.isra.0+0x221/0xc10 [ 484.958606][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.958654][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.958698][ T6089] ? finish_task_switch.isra.0+0x221/0xc10 [ 484.958745][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.958792][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.958837][ T6089] ? rcu_is_watching+0x12/0xc0 [ 484.958885][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.958936][ T6089] ? trace_sched_exit_tp+0xd1/0x120 [ 484.959085][ T6089] ? f2fs_write_data_pages+0xa1f/0xd90 [ 484.959149][ T6089] ? kasan_check_range+0x15c/0x1b0 [ 484.959202][ T6089] f2fs_write_data_pages+0x4ad/0xd90 [ 484.959274][ T6089] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 484.959350][ T6089] ? __pfx___schedule+0x10/0x10 [ 484.959403][ T6089] ? __lock_acquire+0xb97/0x1ce0 [ 484.959466][ T6089] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 484.959532][ T6089] do_writepages+0x27a/0x600 [ 484.959591][ T6089] ? __pfx_do_writepages+0x10/0x10 [ 484.959642][ T6089] ? preempt_schedule_thunk+0x16/0x30 [ 484.959706][ T6089] __writeback_single_inode+0x160/0xfb0 [ 484.959759][ T6089] ? preempt_schedule_thunk+0x16/0x30 [ 484.959817][ T6089] ? __pfx___writeback_single_inode+0x10/0x10 [ 484.959873][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.959932][ T6089] writeback_sb_inodes+0x60d/0xfa0 [ 484.960012][ T6089] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 484.960147][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.960191][ T6089] ? rcu_is_watching+0x12/0xc0 [ 484.960238][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.960282][ T6089] ? queue_io+0x3f6/0x520 [ 484.960334][ T6089] wb_writeback+0x419/0xb70 [ 484.960398][ T6089] ? __pfx_wb_writeback+0x10/0x10 [ 484.960462][ T6089] ? wb_workfn+0x2e5/0xbe0 [ 484.960527][ T6089] wb_workfn+0x14d/0xbe0 [ 484.960587][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.960637][ T6089] ? __pfx_wb_workfn+0x10/0x10 [ 484.960695][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.960745][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.960793][ T6089] ? preempt_schedule_thunk+0x16/0x30 [ 484.960864][ T6089] process_one_work+0x9cf/0x1b70 [ 484.960936][ T6089] ? __pfx_process_one_work+0x10/0x10 [ 484.960980][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.961040][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.961084][ T6089] ? assign_work+0x1a0/0x250 [ 484.961130][ T6089] worker_thread+0x6c8/0xf10 [ 484.961184][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.961228][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.961270][ T6089] ? __kthread_parkme+0x19e/0x250 [ 484.961321][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.961366][ T6089] ? __pfx_worker_thread+0x10/0x10 [ 484.961405][ T6089] kthread+0x3c5/0x780 [ 484.961443][ T6089] ? __pfx_kthread+0x10/0x10 [ 484.961482][ T6089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.961523][ T6089] ? rcu_is_watching+0x12/0xc0 [ 484.961568][ T6089] ? __pfx_kthread+0x10/0x10 [ 484.961606][ T6089] ret_from_fork+0x56d/0x730 [ 484.961638][ T6089] ? __pfx_kthread+0x10/0x10 [ 484.961676][ T6089] ret_from_fork_asm+0x1a/0x30 [ 484.961746][ T6089] [ 485.543763][ T6089] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 485.820040][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.639'. [ 487.038188][ T3068] hsr_slave_0: left promiscuous mode [ 487.178009][ T3068] hsr_slave_1: left promiscuous mode [ 487.234583][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.280533][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.432931][ T8450] netlink: 'syz.7.641': attribute type 11 has an invalid length. [ 488.380363][ T3068] hsr_slave_0: left promiscuous mode [ 489.643830][ T3068] hsr_slave_1: left promiscuous mode [ 489.672797][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.552573][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.374122][ T8471] loop8: detected capacity change from 0 to 40427 [ 491.425903][ T8471] F2FS-fs (loop8): invalid crc value [ 491.554362][ T8471] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 491.567223][ T8471] F2FS-fs (loop8): Start checkpoint disabled! [ 491.895376][ T8471] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 492.554287][ T1006] kworker/u8:6: attempt to access beyond end of device [ 492.554287][ T1006] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 492.624182][ T1006] CPU: 0 UID: 0 PID: 1006 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 492.624235][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.624261][ T1006] Workqueue: writeback wb_workfn (flush-7:8) [ 492.624327][ T1006] Call Trace: [ 492.624338][ T1006] [ 492.624353][ T1006] dump_stack_lvl+0x16c/0x1f0 [ 492.624417][ T1006] f2fs_handle_critical_error+0x624/0x9f0 [ 492.624470][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.624516][ T1006] ? f2fs_build_fault_attr+0x53/0x1f0 [ 492.624567][ T1006] f2fs_write_end_io+0x958/0xcf0 [ 492.624623][ T1006] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 492.624680][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.624734][ T1006] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 492.624784][ T1006] bio_endio+0x713/0x860 [ 492.624847][ T1006] submit_bio_noacct+0x306/0x1ed0 [ 492.624919][ T1006] __submit_merged_bio+0x33c/0x770 [ 492.624978][ T1006] __submit_merged_write_cond+0x319/0x3f0 [ 492.625041][ T1006] f2fs_write_cache_pages+0x2067/0x2570 [ 492.625130][ T1006] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 492.625185][ T1006] ? ret_from_fork+0x56d/0x730 [ 492.625223][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.625268][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.625308][ T1006] ? unwind_get_return_address+0x59/0xa0 [ 492.625353][ T1006] ? arch_stack_walk+0x88/0x100 [ 492.625495][ T1006] ? __pfx___page_table_check_zero+0x10/0x10 [ 492.625556][ T1006] ? mark_held_locks+0x49/0x80 [ 492.625618][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.625663][ T1006] ? lockdep_hardirqs_on+0x7c/0x110 [ 492.625723][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.625776][ T1006] f2fs_write_data_pages+0x4ad/0xd90 [ 492.625848][ T1006] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 492.625933][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.625979][ T1006] ? __lock_acquire+0xb97/0x1ce0 [ 492.626042][ T1006] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 492.626107][ T1006] do_writepages+0x27a/0x600 [ 492.626166][ T1006] ? __pfx_do_writepages+0x10/0x10 [ 492.626214][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.626259][ T1006] ? reacquire_held_locks+0xcd/0x1f0 [ 492.626319][ T1006] ? writeback_sb_inodes+0x3b0/0xfa0 [ 492.626378][ T1006] __writeback_single_inode+0x160/0xfb0 [ 492.626435][ T1006] ? __pfx___writeback_single_inode+0x10/0x10 [ 492.626486][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.626531][ T1006] ? do_raw_spin_unlock+0x172/0x230 [ 492.626575][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.626627][ T1006] writeback_sb_inodes+0x60d/0xfa0 [ 492.626703][ T1006] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 492.626825][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.626871][ T1006] ? rcu_is_watching+0x12/0xc0 [ 492.626927][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.626972][ T1006] ? queue_io+0x3f6/0x520 [ 492.627021][ T1006] wb_writeback+0x419/0xb70 [ 492.627084][ T1006] ? __pfx_wb_writeback+0x10/0x10 [ 492.627132][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.627190][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.627235][ T1006] ? mark_held_locks+0x49/0x80 [ 492.627303][ T1006] wb_workfn+0x14d/0xbe0 [ 492.627361][ T1006] ? try_to_wake_up+0x160/0x1870 [ 492.627410][ T1006] ? __pfx_wb_workfn+0x10/0x10 [ 492.627466][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.627517][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.627568][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.627613][ T1006] ? rcu_is_watching+0x12/0xc0 [ 492.627665][ T1006] process_one_work+0x9cf/0x1b70 [ 492.627728][ T1006] ? __pfx_process_one_work+0x10/0x10 [ 492.627772][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.627829][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.627874][ T1006] ? assign_work+0x1a0/0x250 [ 492.627925][ T1006] worker_thread+0x6c8/0xf10 [ 492.627979][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.628024][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.628063][ T1006] ? __kthread_parkme+0x19e/0x250 [ 492.628116][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.628162][ T1006] ? __pfx_worker_thread+0x10/0x10 [ 492.628203][ T1006] kthread+0x3c5/0x780 [ 492.628242][ T1006] ? __pfx_kthread+0x10/0x10 [ 492.628282][ T1006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.628324][ T1006] ? rcu_is_watching+0x12/0xc0 [ 492.628370][ T1006] ? __pfx_kthread+0x10/0x10 [ 492.628408][ T1006] ret_from_fork+0x56d/0x730 [ 492.628444][ T1006] ? __pfx_kthread+0x10/0x10 [ 492.628481][ T1006] ret_from_fork_asm+0x1a/0x30 [ 492.628551][ T1006] [ 492.628581][ T1006] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 493.274176][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 495.415228][ T3068] team0 (unregistering): Port device team_slave_1 removed [ 495.598329][ T3068] team0 (unregistering): Port device team_slave_0 removed [ 497.404792][ T8276] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 497.918129][ T8513] openvswitch: netlink: Unknown key attributes 1 [ 497.932412][ T8276] usb 9-1: Using ep0 maxpacket: 32 [ 497.980529][ T8276] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 498.004583][ T8276] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.036527][ T8276] usb 9-1: config 0 descriptor?? [ 498.227670][ T8516] block nbd1: Attempted send on invalid socket [ 498.234078][ T8516] blk_print_req_error: 2 callbacks suppressed [ 498.234104][ T8516] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 498.249736][ T8516] block nbd1: Attempted send on invalid socket [ 498.255983][ T8516] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 498.265349][ T8516] Mount JFS Failure: -5 [ 498.284600][ T8276] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 498.346052][ T8276] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.374615][ T8276] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 498.383179][ T3068] team0 (unregistering): Port device team_slave_1 removed [ 498.402190][ T8276] usb 9-1: media controller created [ 498.492798][ T8276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.496876][ T3068] team0 (unregistering): Port device team_slave_0 removed [ 499.433685][ T8276] az6027: usb out operation failed. (-71) [ 499.452371][ T8276] az6027: usb out operation failed. (-71) [ 499.462404][ T8276] stb0899_attach: Driver disabled by Kconfig [ 499.490857][ T8276] az6027: no front-end attached [ 499.490857][ T8276] [ 499.515952][ T8276] az6027: usb out operation failed. (-71) [ 499.521750][ T8276] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 499.696951][ T8276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 499.724906][ T8276] dvb-usb: schedule remote query interval to 400 msecs. [ 499.731895][ T8276] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 499.791018][ T8276] usb 9-1: USB disconnect, device number 2 [ 501.072366][ T8276] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 503.024525][ T24] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 503.125651][ T8552] block nbd1: Attempted send on invalid socket [ 503.132476][ T8552] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.144384][ T8552] block nbd1: Attempted send on invalid socket [ 503.163527][ T8552] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.173881][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 503.214105][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.262738][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.263460][ T8552] block nbd1: Send control failed (result -32) [ 503.296028][ T24] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.334140][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 503.338958][ T8552] block nbd1: Request send failed, requeueing [ 503.361666][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 503.373172][ T24] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 503.524298][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.533381][ T8561] block nbd7: Attempted send on invalid socket [ 503.540342][ T8561] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.557341][ T6040] block nbd1: Dead connection, failed to find a fallback [ 503.559845][ T8319] chnl_net:caif_netlink_parms(): no params data found [ 503.565037][ T6040] block nbd1: shutting down sockets [ 503.578267][ T8561] block nbd7: Attempted send on invalid socket [ 503.579653][ T6040] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.593615][ T8561] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.604602][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 503.604750][ T8561] Mount JFS Failure: -5 [ 503.622922][ T8552] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.715009][ T8548] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 503.732224][ T8552] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.744617][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 503.768304][ T8552] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.780074][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 503.800498][ T8552] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.914508][ T8552] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.926281][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 503.938025][ T8552] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.948701][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 503.964550][ T8552] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.978834][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 503.994140][ T8552] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 504.010597][ T8552] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 504.055102][ T24] hub 9-1:1.0: bad descriptor, ignoring hub [ 504.192477][ T24] hub 9-1:1.0: probe with driver hub failed with error -5 [ 504.300416][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 504.321370][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 504.326663][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 504.330403][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 504.425289][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 504.431260][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 505.639429][ T8577] block nbd4: Attempted send on invalid socket [ 505.649185][ T8577] SQUASHFS error: Failed to read block 0x0: -5 [ 505.656726][ T8577] unable to read squashfs_super_block [ 506.392407][ T5934] usb 9-1: USB disconnect, device number 3 [ 506.733910][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.745622][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.752867][ T8244] bridge_slave_0: entered allmulticast mode [ 506.768269][ T8244] bridge_slave_0: entered promiscuous mode [ 507.958090][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.002234][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.218217][ T5876] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 508.228319][ T8244] bridge_slave_1: entered allmulticast mode [ 508.238168][ T8244] bridge_slave_1: entered promiscuous mode [ 508.254594][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.265368][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.272670][ T8319] bridge_slave_0: entered allmulticast mode [ 508.289607][ T8319] bridge_slave_0: entered promiscuous mode [ 508.518424][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 508.646032][ T5876] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 508.746569][ T5876] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 508.819484][ T5876] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.938492][ T5876] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.957080][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.982309][ T5876] usb 5-1: Product: syz [ 508.996898][ T5876] usb 5-1: Manufacturer: syz [ 509.008241][ T5876] usb 5-1: SerialNumber: syz [ 509.014565][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.026993][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.043408][ T8319] bridge_slave_1: entered allmulticast mode [ 509.085922][ T8319] bridge_slave_1: entered promiscuous mode [ 509.186079][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.254143][ T5876] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 509.469713][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.547086][ T5876] usb 5-1: USB disconnect, device number 5 [ 509.660931][ T8319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.678270][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.731956][ T8319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.118315][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'. [ 510.637822][ T8601] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 510.659018][ T8244] team0: Port device team_slave_0 added [ 510.894862][ T8244] team0: Port device team_slave_1 added [ 510.978566][ T8319] team0: Port device team_slave_0 added [ 511.170076][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.177145][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.319827][ T8607] openvswitch: netlink: Unknown key attributes 1 [ 512.400403][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.424391][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.513300][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.610440][ T8319] team0: Port device team_slave_1 added [ 512.631270][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 513.270059][ T3068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.321020][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.329223][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.355611][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.383847][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.493806][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 513.574188][ T3068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.664126][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 513.694077][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.726471][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 513.736539][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.750894][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.753929][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.776955][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.808408][ T8319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.058111][ T24] usb 5-1: config 0 descriptor?? [ 514.102941][ T3068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.152330][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 515.184739][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 515.204536][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 515.225863][ T24] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 515.347445][ T8621] i2c i2c-1: unsupported multi-msg i2c transaction [ 515.397715][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.452576][ T24] usb 5-1: USB disconnect, device number 6 [ 515.454100][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.123948][ T8319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.469674][ T3068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.750718][ T8276] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 516.952059][ T8244] hsr_slave_0: entered promiscuous mode [ 517.011038][ T8244] hsr_slave_1: entered promiscuous mode [ 519.966519][ T8319] hsr_slave_0: entered promiscuous mode [ 520.205618][ T8319] hsr_slave_1: entered promiscuous mode [ 520.212734][ T8319] debugfs: 'hsr0' already exists in 'hsr' [ 520.273683][ T8319] Cannot create hsr debugfs directory [ 520.439872][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 523.113075][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.134944][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.143895][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.155504][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.163452][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 523.326737][ T8276] usb 9-1: device descriptor read/all, error -110 [ 523.745757][ T8276] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 523.973838][ T8276] usb 9-1: device descriptor read/64, error -32 [ 524.146153][ T8276] usb usb9-port1: attempt power cycle [ 524.754703][ T8696] loop4: detected capacity change from 0 to 40427 [ 524.799760][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.8.708'. [ 524.852421][ T8696] F2FS-fs (loop4): invalid crc value [ 524.936928][ T8696] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 524.950871][ T8696] F2FS-fs (loop4): Start checkpoint disabled! [ 524.985280][ T8696] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 525.643855][ T5868] Bluetooth: hci3: command tx timeout [ 526.092600][ T8703] block nbd1: Attempted send on invalid socket [ 526.157592][ T13] kworker/u8:1: attempt to access beyond end of device [ 526.157592][ T13] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 526.164596][ T8703] blk_print_req_error: 3 callbacks suppressed [ 526.164621][ T8703] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.220758][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 526.220808][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.220833][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 526.220899][ T13] Call Trace: [ 526.220910][ T13] [ 526.220923][ T13] dump_stack_lvl+0x16c/0x1f0 [ 526.220984][ T13] f2fs_handle_critical_error+0x624/0x9f0 [ 526.221045][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.221089][ T13] ? f2fs_build_fault_attr+0x53/0x1f0 [ 526.221140][ T13] f2fs_write_end_io+0x958/0xcf0 [ 526.221197][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 526.221255][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.221308][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 526.221357][ T13] bio_endio+0x713/0x860 [ 526.221422][ T13] submit_bio_noacct+0x306/0x1ed0 [ 526.221482][ T13] __submit_merged_bio+0x33c/0x770 [ 526.221540][ T13] __submit_merged_write_cond+0x319/0x3f0 [ 526.221604][ T13] f2fs_write_cache_pages+0x2067/0x2570 [ 526.221692][ T13] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 526.221756][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.221801][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.221844][ T13] ? find_held_lock+0x2b/0x80 [ 526.221893][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.221941][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.221985][ T13] ? do_raw_spin_unlock+0x172/0x230 [ 526.222050][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.222087][ T13] ? f2fs_available_free_memory+0x279/0xa30 [ 526.222201][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.222255][ T13] f2fs_write_data_pages+0x4ad/0xd90 [ 526.222322][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 526.222394][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.222437][ T13] ? __lock_acquire+0xb97/0x1ce0 [ 526.222496][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 526.222558][ T13] do_writepages+0x27a/0x600 [ 526.222615][ T13] ? __pfx_do_writepages+0x10/0x10 [ 526.222660][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.222703][ T13] ? reacquire_held_locks+0xcd/0x1f0 [ 526.222757][ T13] ? writeback_sb_inodes+0x3b0/0xfa0 [ 526.222812][ T13] __writeback_single_inode+0x160/0xfb0 [ 526.222868][ T13] ? __pfx___writeback_single_inode+0x10/0x10 [ 526.222917][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.222961][ T13] ? do_raw_spin_unlock+0x172/0x230 [ 526.223003][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.223061][ T13] writeback_sb_inodes+0x60d/0xfa0 [ 526.223136][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 526.223185][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.223230][ T13] ? find_held_lock+0x2b/0x80 [ 526.223341][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.223386][ T13] ? rcu_is_watching+0x12/0xc0 [ 526.223433][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.223480][ T13] ? queue_io+0x3f6/0x520 [ 526.223525][ T13] wb_writeback+0x419/0xb70 [ 526.223585][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 526.223632][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.223689][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.223734][ T13] ? mark_held_locks+0x49/0x80 [ 526.223800][ T13] wb_workfn+0x14d/0xbe0 [ 526.223847][ T13] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 526.223893][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 526.223935][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.223972][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.224010][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.224048][ T13] ? rcu_is_watching+0x12/0xc0 [ 526.224090][ T13] process_one_work+0x9cf/0x1b70 [ 526.224138][ T13] ? __pfx_process_one_work+0x10/0x10 [ 526.224170][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.224214][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.224247][ T13] ? assign_work+0x1a0/0x250 [ 526.224279][ T13] worker_thread+0x6c8/0xf10 [ 526.224328][ T13] ? __pfx_worker_thread+0x10/0x10 [ 526.224360][ T13] kthread+0x3c5/0x780 [ 526.224389][ T13] ? __pfx_kthread+0x10/0x10 [ 526.224420][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.224452][ T13] ? rcu_is_watching+0x12/0xc0 [ 526.224488][ T13] ? __pfx_kthread+0x10/0x10 [ 526.224518][ T13] ret_from_fork+0x56d/0x730 [ 526.224545][ T13] ? __pfx_kthread+0x10/0x10 [ 526.224574][ T13] ret_from_fork_asm+0x1a/0x30 [ 526.224628][ T13] [ 527.091646][ T8703] block nbd1: Send control failed (result -32) [ 527.130021][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 527.176037][ T8703] block nbd1: Request send failed, requeueing [ 527.184699][ T6040] block nbd1: Dead connection, failed to find a fallback [ 527.191842][ T6040] block nbd1: shutting down sockets [ 527.197753][ T6040] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.208953][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 527.252164][ T8703] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.361561][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 527.375485][ T8703] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.385387][ T8703] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.396453][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 527.415041][ T8703] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.429258][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 527.464217][ T8703] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.475113][ T8703] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.484879][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 527.501584][ T8703] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.517891][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 527.531515][ T8703] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.543586][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 527.555807][ T8703] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 527.565582][ T8703] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 527.725337][ T5868] Bluetooth: hci3: command tx timeout [ 529.813726][ T5868] Bluetooth: hci3: command tx timeout [ 530.182975][ T3068] bridge_slave_1: left allmulticast mode [ 530.224605][ T3068] bridge_slave_1: left promiscuous mode [ 530.243996][ T3068] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.336014][ T8718] block nbd1: Attempted send on invalid socket [ 530.342773][ T8718] block nbd1: Attempted send on invalid socket [ 530.381632][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 530.415505][ T8718] block nbd1: Attempted send on invalid socket [ 530.435211][ T3068] bridge_slave_0: left allmulticast mode [ 530.453533][ T3068] bridge_slave_0: left promiscuous mode [ 530.495118][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 530.536441][ T8718] block nbd1: Attempted send on invalid socket [ 530.548155][ T8718] block nbd1: Attempted send on invalid socket [ 530.556284][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 530.566423][ T3068] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.590898][ T8718] block nbd1: Attempted send on invalid socket [ 530.600754][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 530.618521][ T8718] block nbd1: Attempted send on invalid socket [ 530.629596][ T8718] block nbd1: Attempted send on invalid socket [ 530.638737][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 530.652097][ T8718] block nbd1: Attempted send on invalid socket [ 530.661036][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 530.688868][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 530.704782][ T8718] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 530.714807][ T8718] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 531.407436][ T3068] bridge_slave_1: left allmulticast mode [ 531.435603][ T3068] bridge_slave_1: left promiscuous mode [ 531.478790][ T3068] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.663742][ T3068] bridge_slave_0: left allmulticast mode [ 531.669468][ T3068] bridge_slave_0: left promiscuous mode [ 531.731796][ T3068] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.883684][ T5868] Bluetooth: hci3: command tx timeout [ 531.954206][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 532.145145][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 532.370112][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 532.387395][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 532.411289][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 532.426143][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 534.232893][ T8743] loop1: detected capacity change from 0 to 40427 [ 534.258136][ T8743] F2FS-fs (loop1): invalid crc value [ 534.353702][ T8743] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 534.366683][ T8743] F2FS-fs (loop1): Start checkpoint disabled! [ 534.409113][ T8743] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 534.545241][ T5868] Bluetooth: hci1: command tx timeout [ 534.698497][ T8615] kworker/u8:14: attempt to access beyond end of device [ 534.698497][ T8615] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 534.794942][ T49] kworker/u8:3: attempt to access beyond end of device [ 534.794942][ T49] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 534.849933][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 534.849986][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 534.850011][ T49] Workqueue: writeback wb_workfn (flush-7:1) [ 534.850077][ T49] Call Trace: [ 534.850089][ T49] [ 534.850103][ T49] dump_stack_lvl+0x16c/0x1f0 [ 534.850164][ T49] f2fs_handle_critical_error+0x624/0x9f0 [ 534.850222][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.850269][ T49] ? f2fs_build_fault_attr+0x53/0x1f0 [ 534.850321][ T49] f2fs_write_end_io+0x958/0xcf0 [ 534.850378][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 534.850438][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.850493][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 534.850544][ T49] bio_endio+0x713/0x860 [ 534.850610][ T49] submit_bio_noacct+0x306/0x1ed0 [ 534.850671][ T49] __submit_merged_bio+0x33c/0x770 [ 534.850730][ T49] __submit_merged_write_cond+0x319/0x3f0 [ 534.850797][ T49] f2fs_write_cache_pages+0x2067/0x2570 [ 534.850887][ T49] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 534.850945][ T49] ? ret_from_fork+0x56d/0x730 [ 534.850985][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.851031][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.851076][ T49] ? unwind_get_return_address+0x59/0xa0 [ 534.851120][ T49] ? arch_stack_walk+0x88/0x100 [ 534.851270][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.851322][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.851376][ T49] f2fs_write_data_pages+0x4ad/0xd90 [ 534.851446][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 534.851504][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.851561][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.851607][ T49] ? __lock_acquire+0xb97/0x1ce0 [ 534.851671][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 534.851740][ T49] do_writepages+0x27a/0x600 [ 534.851797][ T49] ? __pfx_do_writepages+0x10/0x10 [ 534.851843][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.851887][ T49] ? reacquire_held_locks+0xcd/0x1f0 [ 534.851946][ T49] ? writeback_sb_inodes+0x3b0/0xfa0 [ 534.852003][ T49] __writeback_single_inode+0x160/0xfb0 [ 534.852058][ T49] ? __pfx___writeback_single_inode+0x10/0x10 [ 534.852109][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.852154][ T49] ? do_raw_spin_unlock+0x172/0x230 [ 534.852203][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.852255][ T49] writeback_sb_inodes+0x60d/0xfa0 [ 534.852330][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 534.852451][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.852495][ T49] ? rcu_is_watching+0x12/0xc0 [ 534.852543][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.852587][ T49] ? queue_io+0x3f6/0x520 [ 534.852635][ T49] wb_writeback+0x419/0xb70 [ 534.852697][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 534.852743][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.852802][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.852846][ T49] ? mark_held_locks+0x49/0x80 [ 534.852913][ T49] wb_workfn+0x14d/0xbe0 [ 534.852971][ T49] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 534.853031][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 534.853087][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.853137][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.853194][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.853239][ T49] ? rcu_is_watching+0x12/0xc0 [ 534.853295][ T49] process_one_work+0x9cf/0x1b70 [ 534.853358][ T49] ? __pfx_process_one_work+0x10/0x10 [ 534.853401][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.853463][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.853507][ T49] ? assign_work+0x1a0/0x250 [ 534.853549][ T49] worker_thread+0x6c8/0xf10 [ 534.853614][ T49] ? __pfx_worker_thread+0x10/0x10 [ 534.853654][ T49] kthread+0x3c5/0x780 [ 534.853693][ T49] ? __pfx_kthread+0x10/0x10 [ 534.853734][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.853777][ T49] ? rcu_is_watching+0x12/0xc0 [ 534.853825][ T49] ? __pfx_kthread+0x10/0x10 [ 534.853865][ T49] ret_from_fork+0x56d/0x730 [ 534.853899][ T49] ? __pfx_kthread+0x10/0x10 [ 534.853938][ T49] ret_from_fork_asm+0x1a/0x30 [ 534.854010][ T49] [ 535.339895][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 535.479222][ T3068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.492153][ T3068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.509822][ T3068] bond0 (unregistering): Released all slaves [ 536.334071][ T3068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.356725][ T3068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.380412][ T3068] bond0 (unregistering): Released all slaves [ 536.604222][ T5868] Bluetooth: hci1: command tx timeout [ 537.896581][ T5876] syz2: Port: 1 Link DOWN [ 538.764161][ T51] Bluetooth: hci1: command tx timeout [ 539.005243][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 540.843777][ T5868] Bluetooth: hci1: command tx timeout [ 541.088335][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.8.732'. [ 542.525290][ T8780] netlink: 'syz.8.733': attribute type 61 has an invalid length. [ 543.195662][ T8789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.735'. [ 543.649385][ T8788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.735'. [ 546.598022][ T3068] hsr_slave_0: left promiscuous mode [ 546.615268][ T3068] hsr_slave_1: left promiscuous mode [ 546.651773][ T3068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.691661][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.705180][ T3068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.745547][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.600407][ T3068] hsr_slave_0: left promiscuous mode [ 547.681568][ T3068] hsr_slave_1: left promiscuous mode [ 547.692550][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.790158][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.013847][ T3068] veth1_macvtap: left promiscuous mode [ 548.019457][ T3068] veth0_macvtap: left promiscuous mode [ 548.068076][ T3068] veth1_vlan: left promiscuous mode [ 548.091107][ T3068] veth0_vlan: left promiscuous mode [ 548.161081][ T3068] veth0_macvtap: left promiscuous mode [ 548.586587][ T8819] loop7: detected capacity change from 0 to 40427 [ 548.595947][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 548.727980][ T8819] F2FS-fs (loop7): invalid crc value [ 548.799337][ T3068] veth1_vlan: left promiscuous mode [ 548.812801][ T3068] veth0_vlan: left promiscuous mode [ 548.887620][ T8819] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 548.899244][ T8819] F2FS-fs (loop7): Start checkpoint disabled! [ 548.918141][ T8819] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 550.237567][ T49] kworker/u8:3: attempt to access beyond end of device [ 550.237567][ T49] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 550.315847][ T49] kworker/u8:3: attempt to access beyond end of device [ 550.315847][ T49] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 550.390076][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 550.390121][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.390142][ T49] Workqueue: writeback wb_workfn (flush-7:7) [ 550.390196][ T49] Call Trace: [ 550.390208][ T49] [ 550.390220][ T49] dump_stack_lvl+0x16c/0x1f0 [ 550.390270][ T49] f2fs_handle_critical_error+0x624/0x9f0 [ 550.390312][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.390363][ T49] ? f2fs_build_fault_attr+0x53/0x1f0 [ 550.390415][ T49] f2fs_write_end_io+0x958/0xcf0 [ 550.390462][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 550.390500][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.390534][ T49] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 550.390597][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.390638][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 550.390677][ T49] bio_endio+0x713/0x860 [ 550.390730][ T49] submit_bio_noacct+0x306/0x1ed0 [ 550.390778][ T49] __submit_merged_bio+0x33c/0x770 [ 550.390822][ T49] __submit_merged_write_cond+0x319/0x3f0 [ 550.390873][ T49] f2fs_write_cache_pages+0x2067/0x2570 [ 550.390943][ T49] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 550.390998][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391034][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391067][ T49] ? find_held_lock+0x2b/0x80 [ 550.391105][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391143][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391177][ T49] ? do_raw_spin_unlock+0x172/0x230 [ 550.391224][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391258][ T49] ? f2fs_available_free_memory+0x279/0xa30 [ 550.391341][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391374][ T49] ? finish_task_switch.isra.0+0x221/0xc10 [ 550.391411][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391464][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391516][ T49] ? rcu_is_watching+0x12/0xc0 [ 550.391558][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391599][ T49] f2fs_write_data_pages+0x4ad/0xd90 [ 550.391653][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 550.391708][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391742][ T49] ? __lock_acquire+0xb97/0x1ce0 [ 550.391790][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 550.391842][ T49] do_writepages+0x27a/0x600 [ 550.391886][ T49] ? __pfx_do_writepages+0x10/0x10 [ 550.391921][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.391963][ T49] ? reacquire_held_locks+0xcd/0x1f0 [ 550.392009][ T49] ? writeback_sb_inodes+0x3b0/0xfa0 [ 550.392054][ T49] __writeback_single_inode+0x160/0xfb0 [ 550.392097][ T49] ? __pfx___writeback_single_inode+0x10/0x10 [ 550.392135][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.392169][ T49] ? do_raw_spin_unlock+0x172/0x230 [ 550.392203][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.392242][ T49] writeback_sb_inodes+0x60d/0xfa0 [ 550.392300][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 550.392338][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.392372][ T49] ? find_held_lock+0x2b/0x80 [ 550.392459][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.392493][ T49] ? rcu_is_watching+0x12/0xc0 [ 550.392529][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.392580][ T49] ? queue_io+0x3f6/0x520 [ 550.392636][ T49] wb_writeback+0x419/0xb70 [ 550.392684][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 550.392720][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.392764][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.392798][ T49] ? mark_held_locks+0x49/0x80 [ 550.392849][ T49] wb_workfn+0x14d/0xbe0 [ 550.392893][ T49] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 550.392939][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 550.392987][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.393025][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.393064][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.393097][ T49] ? rcu_is_watching+0x12/0xc0 [ 550.393140][ T49] process_one_work+0x9cf/0x1b70 [ 550.393189][ T49] ? __pfx_process_one_work+0x10/0x10 [ 550.393223][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.393267][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.393300][ T49] ? assign_work+0x1a0/0x250 [ 550.393334][ T49] worker_thread+0x6c8/0xf10 [ 550.393384][ T49] ? __pfx_worker_thread+0x10/0x10 [ 550.393416][ T49] kthread+0x3c5/0x780 [ 550.393446][ T49] ? __pfx_kthread+0x10/0x10 [ 550.393486][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.393532][ T49] ? rcu_is_watching+0x12/0xc0 [ 550.393581][ T49] ? __pfx_kthread+0x10/0x10 [ 550.393618][ T49] ret_from_fork+0x56d/0x730 [ 550.393647][ T49] ? __pfx_kthread+0x10/0x10 [ 550.393693][ T49] ret_from_fork_asm+0x1a/0x30 [ 550.393770][ T49] [ 550.892965][ T49] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 552.014941][ T8840] ------------[ cut here ]------------ [ 552.020460][ T8840] DEBUG_LOCKS_WARN_ON(1) [ 552.020616][ T8840] WARNING: CPU: 1 PID: 8840 at kernel/locking/lockdep.c:238 hlock_class+0x64/0x70 [ 552.034086][ T8840] Modules linked in: [ 552.037997][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.4.747 Not tainted syzkaller #0 PREEMPT(full) [ 552.047206][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.057373][ T8840] RIP: 0010:hlock_class+0x64/0x70 [ 552.062431][ T8840] Code: ff 90 e8 af 83 47 03 85 c0 74 23 8b 05 a5 75 14 0f 85 c0 75 19 90 48 c7 c6 5c bd e2 8d 48 c7 c7 14 69 e1 8d e8 4d db e2 ff 90 <0f> 0b 90 90 90 eb c9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 552.082099][ T8840] RSP: 0018:ffffc90003ddf7f0 EFLAGS: 00010086 [ 552.088204][ T8840] RAX: 0000000000000000 RBX: ffff88801db3e4f0 RCX: ffffc90011cf0000 [ 552.096192][ T8840] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 552.104184][ T8840] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 552.112168][ T8840] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff88801db3e540 [ 552.120188][ T8840] R13: ffff88801db3da00 R14: 0000000000000000 R15: ffffffff8b4f5018 [ 552.128186][ T8840] FS: 00007f8cba7916c0(0000) GS:ffff8881247b4000(0000) knlGS:0000000000000000 [ 552.137136][ T8840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.143738][ T8840] CR2: 000000110c2cf199 CR3: 000000004afa1000 CR4: 0000000000350ef0 [ 552.151732][ T8840] Call Trace: [ 552.155017][ T8840] [ 552.157964][ T8840] __lock_acquire+0x218/0x1ce0 [ 552.162773][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.168434][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.174188][ T8840] ? dns_resolver_match_preparse+0x48/0x70 [ 552.180014][ T8840] lock_acquire+0x179/0x350 [ 552.184560][ T8840] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 552.190246][ T8840] ? __pfx___might_resched+0x10/0x10 [ 552.195568][ T8840] ? net_ctl_permissions+0x118/0x130 [ 552.200872][ T8840] down_write+0x92/0x200 [ 552.205132][ T8840] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 552.210802][ T8840] ? __pfx_down_write+0x10/0x10 [ 552.215664][ T8840] ? __pfx_net_ctl_permissions+0x10/0x10 [ 552.221313][ T8840] ? net_ctl_permissions+0x118/0x130 [ 552.226607][ T8840] kernfs_remove_by_name_ns+0x3d/0x110 [ 552.232095][ T8840] driver_remove_file+0x4a/0x60 [ 552.236951][ T8840] bus_remove_driver+0x224/0x2c0 [ 552.241913][ T8840] driver_unregister+0x76/0xb0 [ 552.246686][ T8840] comedi_device_detach_locked+0x12f/0xa50 [ 552.252523][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.258176][ T8840] do_devconfig_ioctl+0x555/0x710 [ 552.263218][ T8840] ? __mutex_lock+0x1c5/0x1060 [ 552.268021][ T8840] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 552.273595][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.279333][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.285014][ T8840] ? find_held_lock+0x2b/0x80 [ 552.289712][ T8840] comedi_unlocked_ioctl+0x165d/0x2f00 [ 552.295207][ T8840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 552.301211][ T8840] ? futex_wake+0x1ad/0x530 [ 552.305732][ T8840] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 552.311567][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.317219][ T8840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.323130][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.328784][ T8840] ? do_vfs_ioctl+0x128/0x14f0 [ 552.333570][ T8840] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 552.338617][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.344350][ T8840] ? find_held_lock+0x2b/0x80 [ 552.349040][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.354687][ T8840] ? hook_file_ioctl_common+0x145/0x410 [ 552.360254][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.365899][ T8840] ? __fget_files+0x20e/0x3c0 [ 552.370581][ T8840] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 552.376494][ T8840] __x64_sys_ioctl+0x18e/0x210 [ 552.381281][ T8840] do_syscall_64+0xcd/0x4e0 [ 552.385811][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.391756][ T8840] RIP: 0033:0x7f8cbc98eba9 [ 552.396174][ T8840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.415794][ T8840] RSP: 002b:00007f8cba791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.424215][ T8840] RAX: ffffffffffffffda RBX: 00007f8cbcbd6270 RCX: 00007f8cbc98eba9 [ 552.432206][ T8840] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000b [ 552.440177][ T8840] RBP: 00007f8cbca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 552.448158][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.456128][ T8840] R13: 00007f8cbcbd6308 R14: 00007f8cbcbd6270 R15: 00007ffccf022c68 [ 552.464119][ T8840] [ 552.467140][ T8840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 552.474424][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.4.747 Not tainted syzkaller #0 PREEMPT(full) [ 552.483631][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.493776][ T8840] Call Trace: [ 552.497064][ T8840] [ 552.499991][ T8840] dump_stack_lvl+0x3d/0x1f0 [ 552.504614][ T8840] vpanic+0x6e8/0x7a0 [ 552.508625][ T8840] ? __pfx_vpanic+0x10/0x10 [ 552.513162][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.518814][ T8840] ? hlock_class+0x64/0x70 [ 552.523246][ T8840] panic+0xca/0xd0 [ 552.526997][ T8840] ? __pfx_panic+0x10/0x10 [ 552.531456][ T8840] check_panic_on_warn+0xab/0xb0 [ 552.536399][ T8840] __warn+0xf6/0x3c0 [ 552.540295][ T8840] ? __pfx_vprintk_emit+0x10/0x10 [ 552.545421][ T8840] ? hlock_class+0x64/0x70 [ 552.549854][ T8840] report_bug+0x3c3/0x580 [ 552.554206][ T8840] ? hlock_class+0x64/0x70 [ 552.558633][ T8840] handle_bug+0x184/0x210 [ 552.562969][ T8840] exc_invalid_op+0x17/0x50 [ 552.567479][ T8840] asm_exc_invalid_op+0x1a/0x20 [ 552.572344][ T8840] RIP: 0010:hlock_class+0x64/0x70 [ 552.577383][ T8840] Code: ff 90 e8 af 83 47 03 85 c0 74 23 8b 05 a5 75 14 0f 85 c0 75 19 90 48 c7 c6 5c bd e2 8d 48 c7 c7 14 69 e1 8d e8 4d db e2 ff 90 <0f> 0b 90 90 90 eb c9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 552.597012][ T8840] RSP: 0018:ffffc90003ddf7f0 EFLAGS: 00010086 [ 552.603281][ T8840] RAX: 0000000000000000 RBX: ffff88801db3e4f0 RCX: ffffc90011cf0000 [ 552.611320][ T8840] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 552.619301][ T8840] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 552.627361][ T8840] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff88801db3e540 [ 552.635506][ T8840] R13: ffff88801db3da00 R14: 0000000000000000 R15: ffffffff8b4f5018 [ 552.643481][ T8840] ? dns_resolver_match_preparse+0x48/0x70 [ 552.649310][ T8840] ? __warn_printk+0x1a5/0x350 [ 552.654105][ T8840] __lock_acquire+0x218/0x1ce0 [ 552.658905][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.664557][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.670205][ T8840] ? dns_resolver_match_preparse+0x48/0x70 [ 552.676032][ T8840] lock_acquire+0x179/0x350 [ 552.680564][ T8840] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 552.686224][ T8840] ? __pfx___might_resched+0x10/0x10 [ 552.691614][ T8840] ? net_ctl_permissions+0x118/0x130 [ 552.696908][ T8840] down_write+0x92/0x200 [ 552.701165][ T8840] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 552.706833][ T8840] ? __pfx_down_write+0x10/0x10 [ 552.711693][ T8840] ? __pfx_net_ctl_permissions+0x10/0x10 [ 552.717336][ T8840] ? net_ctl_permissions+0x118/0x130 [ 552.722633][ T8840] kernfs_remove_by_name_ns+0x3d/0x110 [ 552.728122][ T8840] driver_remove_file+0x4a/0x60 [ 552.732981][ T8840] bus_remove_driver+0x224/0x2c0 [ 552.737963][ T8840] driver_unregister+0x76/0xb0 [ 552.742778][ T8840] comedi_device_detach_locked+0x12f/0xa50 [ 552.748616][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.754271][ T8840] do_devconfig_ioctl+0x555/0x710 [ 552.759330][ T8840] ? __mutex_lock+0x1c5/0x1060 [ 552.764228][ T8840] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 552.769800][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.775453][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.781098][ T8840] ? find_held_lock+0x2b/0x80 [ 552.785791][ T8840] comedi_unlocked_ioctl+0x165d/0x2f00 [ 552.791362][ T8840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 552.797353][ T8840] ? futex_wake+0x1ad/0x530 [ 552.801872][ T8840] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 552.807706][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.813354][ T8840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.819263][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.824914][ T8840] ? do_vfs_ioctl+0x128/0x14f0 [ 552.829703][ T8840] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 552.834747][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.840394][ T8840] ? find_held_lock+0x2b/0x80 [ 552.845090][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.850736][ T8840] ? hook_file_ioctl_common+0x145/0x410 [ 552.856480][ T8840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.862127][ T8840] ? __fget_files+0x20e/0x3c0 [ 552.866899][ T8840] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 552.872735][ T8840] __x64_sys_ioctl+0x18e/0x210 [ 552.877522][ T8840] do_syscall_64+0xcd/0x4e0 [ 552.882056][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.887957][ T8840] RIP: 0033:0x7f8cbc98eba9 [ 552.892373][ T8840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.912033][ T8840] RSP: 002b:00007f8cba791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.920458][ T8840] RAX: ffffffffffffffda RBX: 00007f8cbcbd6270 RCX: 00007f8cbc98eba9 [ 552.928862][ T8840] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000b [ 552.936833][ T8840] RBP: 00007f8cbca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 552.944798][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.952764][ T8840] R13: 00007f8cbcbd6308 R14: 00007f8cbcbd6270 R15: 00007ffccf022c68 [ 552.960744][ T8840] [ 552.964055][ T8840] Kernel Offset: disabled [ 552.968375][ T8840] Rebooting in 86400 seconds..