last executing test programs: 19m5.918432046s ago: executing program 32 (id=124): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x800, 0x5, 0x20002d2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x7626, &(0x7f00000002c0)={0x0, 0x651f, 0x20, 0x1, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r0], 0x1) 17m54.376107888s ago: executing program 33 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) openat$vcs(0xffffffffffffff9c, 0x0, 0x9a442, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) close(r3) 17m20.001297584s ago: executing program 34 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0x1015, 0x101, 0x0, 0x0) 12m29.738619321s ago: executing program 35 (id=873): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80800) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x395c06b, 0x0, 0x11, 0x0, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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") r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 12m1.122861656s ago: executing program 36 (id=926): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) inotify_init() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, 0x0, 0x4008010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m32.895609527s ago: executing program 6 (id=1118): io_setup(0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) 10m31.236317282s ago: executing program 6 (id=1122): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000019300)={{0x6, 0x4, 0x7, 0x0, 'syz0\x00', 0xfffffffb}, 0x3, 0x30, 0x42af, r1, 0x2, 0x800, 'syz0\x00', &(0x7f0000000080)=['fw\x00', ').}%^\x00'], 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) accept$alg(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r2, 0x8000000000008, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 10m29.682280205s ago: executing program 6 (id=1124): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0xfdef) openat(0xffffffffffffff9c, 0x0, 0x42, 0x18e) 10m28.273413426s ago: executing program 6 (id=1128): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, &(0x7f00000003c0)={0x1, r2}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 10m21.879711388s ago: executing program 6 (id=1133): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="f3b1de59de0557c0412319e0d7388632a82e4bf8e2c0aac73cd46a68a843508ad6df8ac8c36660ee60582f174428a61d33a70570d858ba51f0172bbca99489a371c6e32aa4bb4256d5a78362819fba16475ecf6f383b6716d1d1bb372ed989404338f6bd45c0047cfb636142bbe6533201324a6863296f6da966271000005068444559f9c95fe28e580340adc86ede21d4b2ae19a5e4de182f546f2827a2f72aee30f1a688403972e6941a2a946b88c1f5f27a6194c228a56ea51cf375", 0xbd}, {&(0x7f0000000240)="1f1a66b1a86afbbec1d72ec5f65f7ec27c45c9479a9c98f85934caeb72ae5d5205c5a9db4f4779aff0b1150e9fe01a4fc8b1b2590281938d02b238a13eba10d46fce37ba210438d189647636b851e01c4bb2c8d84999e263b3774647f6d1ada8e5a9e453689a1b41c4f193d6459d0649c929f995ca9513881ecd19bbb819048734db2c896e3041a9e9d5495af2b8addf58ec5b5b794cc0ab2f46bcd3b5da5e2f05122857dc84bb6922e3e5d358f3c62e533287661407698ca6e82cc88f9e8089f7128543830130d69427323c4b301df0b41d57", 0xd3}, {&(0x7f0000000340)="601ffe0cf0f7863dcba2080d6db10a428323f73d51daefb0dfdf836a", 0x1c}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10m19.26925967s ago: executing program 6 (id=1137): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000019300)={{0x6, 0x4, 0x7, 0x0, 'syz0\x00', 0xfffffffb}, 0x3, 0x30, 0x42af, r1, 0x2, 0x800, 'syz0\x00', &(0x7f0000000080)=['fw\x00', ').}%^\x00'], 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r3, 0x8000000000008, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 10m17.433616311s ago: executing program 37 (id=1119): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000019300)={{0x6, 0x4, 0x7, 0x0, 'syz0\x00', 0xfffffffb}, 0x3, 0x30, 0x42af, r1, 0x2, 0x800, 'syz0\x00', &(0x7f0000000080)=['fw\x00', ').}%^\x00'], 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) accept$alg(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r3, 0x8000000000008, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 10m4.676026816s ago: executing program 38 (id=1135): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x8, 0x700, 0x10000000, 0xff, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x64, 0x0, 0x3, 0x4, 0x0, @empty, @empty}}}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 10m4.044360069s ago: executing program 39 (id=1137): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000019300)={{0x6, 0x4, 0x7, 0x0, 'syz0\x00', 0xfffffffb}, 0x3, 0x30, 0x42af, r1, 0x2, 0x800, 'syz0\x00', &(0x7f0000000080)=['fw\x00', ').}%^\x00'], 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r3, 0x8000000000008, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 7m38.75554816s ago: executing program 1 (id=1409): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe0000"], 0x30}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x181482) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6020, 0x1) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000400)={0x6c, 0x1}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x25, 0x3, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7m34.556063615s ago: executing program 1 (id=1418): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7m33.932076299s ago: executing program 1 (id=1421): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xe1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006c0000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000054b000/0x4000)=nil, &(0x7f00006bf000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000004) r2 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xdaa9, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x771f, 0x5e, 0x0, 0xfffffffffffffe16) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffe, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 7m31.367351048s ago: executing program 1 (id=1425): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7m29.589645414s ago: executing program 1 (id=1429): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ftruncate(r1, 0x2007ffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xfffffbffa003e45f, 0x700000000000000) 7m27.624133336s ago: executing program 1 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$clear(0x7, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0xa931) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r1 = gettid() tkill(r1, 0x1) keyctl$setperm(0x5, r0, 0x180400) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x84000614) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') 7m11.488860978s ago: executing program 40 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$clear(0x7, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0xa931) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r1 = gettid() tkill(r1, 0x1) keyctl$setperm(0x5, r0, 0x180400) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x84000614) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') 6m24.046427651s ago: executing program 2 (id=1541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 6m22.89145716s ago: executing program 2 (id=1544): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r2 = mq_open(&(0x7f0000000280)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x1bc17f2b6fab1ce6, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xffffffffffffffea, 0x9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0x5408, 0x13500}, &(0x7f0000000240), &(0x7f0000002a80), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b32, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 6m19.6329366s ago: executing program 9 (id=1549): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1aef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe7762ac5531636761ca83f2412d1f607e9002fb41024932205f2176fc5b326c95420000000000"], 0x1, 0x315, &(0x7f0000001f80)="$eJzs3U1P1E4cB/Dvr+3C8ofwr4Ax8aKiJHohoh6MlzVmr949GZVdEkKDETBRLq7Eo/HowbtvwRfhReMbUC+efAHcamY67fZhtrvELWXx+0kgs9N5+A19mqlZCyL6Z91rf/9485f6EcCFC+AO4ABoAh6AszjXfL69t7kXdDtlDbm6hvoRRDWlUGZ9u2urqurpGoavPnmYS+dRNcIwvPuj7iCodvrst3CAaXMe6u3NY45rXPKD6wEXagqlNum/gRziEC8wX2M4RER0Apj7v2duE3M6S+A4wIq57U/0/T/vsO4AxutWUMgKSyuo+38YeaVLi9q//+tN/fWeXsKpY8KJV4mjBNPIfZ5CNJHMzMHEvqr8aYIysTgzG5seVtdfo+PgAC0jVWFJ/+5Ea9bYkGiXp0YZhrW1Rm6k9/+LRqNmlDP5inFIG5tBd1olLPEvDutx3OSzfJWH4uMDOsn8zwtF7Sb9d/Fze8ppqPivD25xVtdSpWCW/a1Wy8kUOaM7OW96MIaMsmlfkaTbjB8Q9JIILHEexAnd9wKyjxWi0a3ZOpB+44u2Wn7yqVhX97WUqeWaI2F1/WlQ+iilGvEQ5Z08kGX8xie0U/N/R8W3gtSZWXapF13SHBnReAacU54u6RfuHL0kdTGJwJg+8tgIOOLTsrd4gtuY3325v+UGQXdnCvtbj1VC5aQSz+Z2xOQ03gDWMtUnXJSUQa+fE93RwjDJkQHjMomwyuCvjbVBdf1IctTpYyuszrIkxznu3TRRiXj6U1rYg21T+wvKDshKE/Fj9bE0qCZaAzZVco2iE2ZX4p1uMgqTWDrl1LxLovWfnsmbWZ2+zqhffsk8vXyRiUyLa8kKLjsVXLDNXYasDWYt/7pY7PHGgDWjXnNdvgpcSWUKSnv0dZynhrTxDY/4/J+IiIiIiIiIiIiIiIiIiIiIiIiIaNL8/bcIIKnvQlx6HzWbKVP3GImIiIiIiIiIiIiIiIiIiIiIiIiIiIiIJt3o7/+d6b+pyfZ/xOv3//pD3/+beQGweZkS3/9LVI8/AQAA//9u9YIm") 6m19.611434329s ago: executing program 2 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) 6m18.24607581s ago: executing program 2 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 6m17.053191149s ago: executing program 2 (id=1557): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$unlink(0x9, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m16.891796903s ago: executing program 9 (id=1559): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f0000000000)="11868a0fceae284c000000010000", 0xe) 6m14.581535272s ago: executing program 2 (id=1560): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x100) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x5, 0x0) listen(r2, 0x1) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) 6m11.388734353s ago: executing program 9 (id=1565): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @loopback}}) 6m8.776864329s ago: executing program 9 (id=1569): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6m7.582168786s ago: executing program 9 (id=1570): syz_emit_vhci(0x0, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$udf(&(0x7f0000001a40), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x81000) 6m6.431880102s ago: executing program 9 (id=1572): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'batadv_slave_1\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x6, 0xfd, 0x81, "399ce7ce3149"}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2104de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x20048084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x37fe0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) 5m56.148640463s ago: executing program 41 (id=1560): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x100) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x5, 0x0) listen(r2, 0x1) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) 5m49.968349507s ago: executing program 42 (id=1572): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'batadv_slave_1\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x6, 0xfd, 0x81, "399ce7ce3149"}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2104de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x20048084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x37fe0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) 1m48.874146144s ago: executing program 3 (id=1928): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3122861, &(0x7f0000000500), 0x1, 0x547, &(0x7f0000001440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000d000)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) readahead(r1, 0xffffffffffff9c86, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r5, 0xfffc}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_read_part_table(0x5cc, &(0x7f0000000680)="$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") 1m42.46143264s ago: executing program 3 (id=1937): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) move_pages(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) gettid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) timer_settime(0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x6, 0x2, @thr={0x0, 0x0}}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz0\x00', {0x2, 0x5, 0x4, 0xbf1e}, 0x19, [0x8, 0x1, 0x0, 0xca, 0x800, 0x8, 0xd, 0x2, 0x0, 0x3, 0xffffffff, 0x80000000, 0x7, 0x1000, 0x4, 0xc, 0x0, 0x4d8, 0x5, 0x8a, 0x5, 0x3c00, 0xfb3c, 0x4, 0x9, 0x6f, 0x400, 0x5, 0x10001, 0x1, 0x46e6e79d, 0x6, 0x1e, 0x0, 0x7, 0x42c3, 0x401, 0x1000, 0x8, 0x7fffffff, 0x3, 0x2, 0x3ff, 0x7, 0x10001, 0x5, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7fffffff, 0x3, 0xf2a1, 0x6, 0x4, 0x4, 0x8, 0xb, 0x0, 0x1, 0x3ff, 0x6, 0x7], [0x5f66, 0x3, 0x2, 0x8, 0xfffffffe, 0x8, 0xfffffff9, 0xea, 0xd, 0x2, 0x10, 0x4, 0x6, 0xe2, 0x2, 0x4, 0x10, 0x65f, 0x53, 0x5, 0x29, 0xd0b7, 0x7, 0x81, 0x2, 0x0, 0x7fffffff, 0x9, 0x1, 0x4, 0x5, 0x9, 0xfffeffff, 0x8, 0x8, 0x7, 0x2f7a, 0x1, 0xd015, 0x8, 0x47, 0xfffffffe, 0xfffffffc, 0xe6, 0x4, 0xa6b32313, 0xc112, 0x6, 0x40, 0x8, 0x5, 0x7, 0x2, 0x6, 0x64a0, 0x7, 0x9, 0x5, 0x668bb2c, 0x6, 0x3, 0x400, 0xd97c, 0x80000000], [0x6, 0xffff7fff, 0x6, 0xfff, 0x1000, 0x7fff, 0x7, 0xfffffffc, 0xf0b4, 0x3, 0x9, 0x0, 0x7fff, 0x0, 0xf646, 0xffff, 0x9, 0x8000, 0x0, 0x0, 0x9, 0xe79, 0x80000000, 0x7, 0x9, 0x2, 0x9, 0x0, 0xa3, 0xc000, 0x3, 0x80, 0x6, 0x9, 0x3, 0x81, 0x101, 0x8, 0xdb60, 0xa2, 0x5, 0xfff, 0x85, 0x3, 0xcf, 0x3, 0xffffffc0, 0x0, 0x5, 0x0, 0x7, 0x42f, 0x7, 0x1000, 0x800, 0x2, 0x9de, 0x4, 0x2, 0x3, 0x2, 0x4, 0x2, 0xfffffffc], [0x7, 0x6, 0x805, 0x40, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x30, 0x8, 0x7fffffff, 0x7, 0xbbb, 0x8, 0xa571, 0x9, 0x2, 0x9, 0x5, 0x1, 0x2, 0x0, 0x16, 0x1ff, 0x1ff, 0xb, 0xfffffff9, 0x40, 0x5, 0x40, 0x0, 0xe80, 0x7, 0x2, 0x3, 0x1, 0x1ff, 0x0, 0x6, 0xb82e, 0x2, 0x1, 0x9bb8, 0xfff, 0x32f9, 0x4, 0x81, 0x3ff, 0x1ff, 0x6, 0x9, 0x8, 0x6, 0x5, 0x1, 0x1a, 0x1, 0xffffffff, 0x0, 0x1, 0x6]}, 0x45c) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x2ff, 0xe7, 0x80000300}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 1m37.497733555s ago: executing program 3 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 1m32.113910469s ago: executing program 3 (id=1948): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 1m28.786289176s ago: executing program 3 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) socket(0x18, 0x2, 0x6) r1 = syz_clone(0x2000000, &(0x7f00000024c0)="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", 0x519, 0x0, 0x0, 0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000001380)='ns/uts\x00') open_by_handle_at(r2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)=0x80, 0x4) syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) 1m23.890615143s ago: executing program 3 (id=1960): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{0x0}], 0x1}}], 0x1, 0x48014) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) io_uring_enter(0xffffffffffffffff, 0x1cc5, 0x22cb, 0x40, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2400c800) 1m18.975238435s ago: executing program 7 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) 1m16.707415188s ago: executing program 7 (id=1971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m14.546686432s ago: executing program 7 (id=1972): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x28, 0xc2, 0x4d, 0x8, 0x249c, 0x9008, 0x9015, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9c, 0x5b, 0xb0, 0x8, "", [{{0x9, 0x4, 0x5b, 0x9, 0x0, 0x2a, 0xfa, 0x33, 0x4}}]}}]}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(0x0, 0x2, 0x6c2ac1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x4) dup(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10000, &(0x7f0000000180)=ANY=[]) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 1m9.349494132s ago: executing program 7 (id=1983): request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x7, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x9, 0x4, 0x5, 0x8}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) getdents(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 1m8.268288942s ago: executing program 43 (id=1960): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{0x0}], 0x1}}], 0x1, 0x48014) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) io_uring_enter(0xffffffffffffffff, 0x1cc5, 0x22cb, 0x40, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2400c800) 1m4.754374874s ago: executing program 7 (id=1991): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m2.643264182s ago: executing program 7 (id=1995): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 46.230831654s ago: executing program 44 (id=1995): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 25.040711413s ago: executing program 5 (id=2041): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f0000000400)=[{0x84, 0x0, 0x6, 0x8, @time={0x80, 0x7f}, {0xb6, 0x1}, {0x9, 0xc6}, @result={0x5, 0x4}}], 0x1c) keyctl$search(0xa, r3, &(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, r3) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x12, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x10}, @generic="91ddcdc8fec5"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @loopback, 0xe, 0x7a, 0xc, 0x500, 0x9, 0x80100000}) request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)=',&^]:{/^-^+,^:@}\x00', 0xfffffffffffffff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x4001020, 0x0, 0x0, &(0x7f0000019100), 0x0, &(0x7f0000019180)="13") keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0) 22.801531031s ago: executing program 5 (id=2044): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$msdos(&(0x7f00000021c0), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f00000021c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 19.977048205s ago: executing program 5 (id=2047): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ftruncate(r1, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r1, 0x0, r3, 0x0, 0xfffffbffa003e45f, 0x700000000000000) 13.250069498s ago: executing program 0 (id=2056): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20042) write$sndseq(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff03c}, {0x6}]}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004479bb10b10e07700002010203010902120001fd0090020904b80200ff00ff00"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf4, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7f", 0x0, 0xfe, 0x60000000}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x10000000) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000011c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x4, 0x7a}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x200, 0x7f, 0x6, 0x20, 0x20, 0xfe}, 0x8, &(0x7f0000001240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x96, &(0x7f0000001280)=@string={0x96, 0x3, "d754aac8fab1a04851c3c1ec44b8bedc5907ef9cc6ab96e08eb51261b7979c99155f7b28e72f108eb45164bcb76aebe1f2e40ac6f439010972acbbcd486aa54390dde6b17621f8e002cd7b185a6ed4d1372214584c00cbc12d04acf383d9a15f95488a870e82a93e1f002fad9a47ed40a8edcf5ae2d5df796de8d6262fd92657050c506a2f504ad1fb834ee09351578f4fe2da13"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x41c}}, {0x58, &(0x7f0000001400)=@string={0x58, 0x3, "ac327350cb3534d5e43025906de9b40676f1ebe9eabbeb47766ed34393c883031bb7b6c530f279957f5ee940d15427d7c0e154fe54ece867589eb5ef1564a61b8d9d3dbc591bd6972ff398638750ba7afb9342d8b72d"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x812}}, {0x0, 0x0}]}) 12.538617095s ago: executing program 5 (id=2058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(0x0, 0x7) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) io_submit(0x0, 0x2000000000000091, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmmsg$sock(r2, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x8044) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 11.926246485s ago: executing program 8 (id=2061): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/444], 0x6, 0x2dd, &(0x7f0000000ac0)="$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") r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd27, 0x25dfd3ff, {0x80, 0x20, 0x20, 0xfb, 0x0, 0x4, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x44095}, 0x11) open(&(0x7f0000000000)='./bus\x00', 0x4c27e, 0x2) inotify_init1(0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x1000, 0xc1, 0x30314247, 0x4, 0x6, [{0x3, 0x4}, {0x3, 0xbd03}, {0x40, 0x1}, {0x5, 0x6}, {0x5a, 0x68a1b732}, {0x5, 0x8}, {0x9, 0x7e}, {0x8, 0xf9}], 0x72, 0x8, 0x2, 0x1, 0x7}}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r6, r5, &(0x7f00000001c0)=0x1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x4, 0x0, 0xd}) 10.395606892s ago: executing program 8 (id=2062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9.971580389s ago: executing program 8 (id=2063): r0 = socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 9.546899761s ago: executing program 4 (id=2064): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r3) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000810, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 8.700885088s ago: executing program 8 (id=2065): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000140)={0x40, 0x30, 0x2, "2e16"}, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x5, 0x0, 0x400, 0xb7, 0xc20022, r4}) sendto$packet(r3, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r4, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000540)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x3d, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x44010) 8.560164119s ago: executing program 0 (id=2066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 7.638179418s ago: executing program 0 (id=2067): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x40, r4, 0x21, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0xd6, &(0x7f0000000200)="3f6ef1b7fab0094b7fe4ebad5d45ad4ceabd4e9dd0443555a1cfc80eaab9e222896df7c8e694816d0b18139e43e88b25f020bec84967677c7ac7f202a25619769f1cef1f79ac9527b0028509f83302104e2435d4fc6b6d991ddbab48186c401dd00b022f46d0b7c3639f9eaab9c27675aa1a583c855cda4622163c4aeb0c23cd59b7327e89c8e8f2a33b15c0fd02146eec261be59617c3af8ad8bf7bd8778b832f846cff1d91a42256bd9ba4cca41a4caa9fc09646135be04ac41540a1a1162575e5a1d72b18de2edfae7500c9903eea6613242abd40", 0x32, 0x0, &(0x7f0000000300)="b9a8479f181059f11305ecf9d7d871623d54f9b5e412d875460b33c541618101f1f34cebceb5e4665537abf557086e9dcfcf"}) 7.433394369s ago: executing program 4 (id=2068): ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89e0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x3, 0x5003) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1810002, &(0x7f0000000880)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0af3e9f7718732aaccc2158ad1dc498162eb5e87e3ec955164b6a97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e153b3a5dd539457cf51acadebb83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b21e9431d1cf655282fcbb938b0d78d5e36b5e6b7d1c01f8b6423066333a94bb51f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebb5b396e66db522ca6f2ae2ca64ab0d9d3f0eeb890d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd824744057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d423077136da0140677053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efb9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec71365f8dd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f405", @ANYRES8, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="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", @ANYRES16, @ANYRES64], 0x1, 0x1cd, &(0x7f0000002180)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) rename(&(0x7f00000001c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x27, 0x366, &(0x7f0000000340)="$eJzs3T9oXHUcAPDv9SW5JFhzg1BwOt0EKU3AxSmhVChm0Mrhv8XDpqK5s5DDgzjkcpMUJ8VF0Mmtg46dxUHEzcHVCuIfXOxWaPDJ3b17979NwYuVfj5D+fL9fb/v93uvj9y7I/fLG63YvbwYV27d+jWWlwuxsHl+M24XohSnIomew5jqw6XpeQDgAXc7TeOvtOfe1R+v9iOv/QDw/9V9/X/r9CBRvI/ma4/MY0kAwJwN3v8X7vb+/4Wp2atzWxYAMEcTn/8/OTI89jH/Qv47AT0r818gAPCve+nV157f2o64VC4vR9Q/aFaalXh2ML51Jd6OWuzEuViLo4jeg0LvaaHz73MXty+cK3f8VopKp6NZiai3mpXek8JW0u0vxnqsRSnrT/P+pNO/3u0vR8Rhqzt/1AvNymKsZvP/tBo7sRFr8dhEf8TF7Qsb5ewAlXq/vxXRjuX+SXTWfzbW4oc342rU4nJ0egfrP1gvl8+n2yP9zevFbh0AAAAAAAAAAAAAAAAAAAAAAMzD2XKuFJV6a7HSH7mUFyQxGM/3x8nqsv2B2r39gdJif3eea8n4/kCj+/M0Kwtx6r86aQAAAAAAAAAAAAAAAAAAAHjANPaXolqr7ew19t/fHQ5aQ5l3v/vym5XoDy1kre8kg67IkiPH6RcOHTmJfIo0b0+TkZosSCL6xYfV6zfyFQ/XFPOzmGjvBMWJoUK2pmqtdvqJXz6b1vV3JzjsZpKYuCyjQSGbf2io/mgnsRwRR7O6Zgcb96i5mabprPaDT8cz2VYMrftexjGCbxc71/bMM93M19lMTz299vLNT774Y7dai3bvytRqS3uNo/QYR45CRJ5J0yxIhu6fQnadC1PuhOlBe5Bp7zX2q8mPf77y+EffjxUn0++fdDjz3uy5vhrPLPWCQkSpfxHuttTFKTf/9OD1O/ndOzw085YYCc58vlm9cfDz78f9Xx76IWGjDgAAAAAAAAAAAAAAAAAAOBGDL/2ODaRp2pos73+l/8WTWBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnJTB3/8fCtoTmSwoxWRxHtxpxeRQcWevMXPylRM9VQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmL/BAAA//+EQ3bE") 6.409235105s ago: executing program 4 (id=2069): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r2, 0xffffffffffffffff, 0x31, 0x30}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0xd8, 0x0, 0x148, 0xd8, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffff00, 0xff000000, 'gre0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x9, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x5e}}}}, {{@ip={@private=0xa010100, @private=0xa010101, 0x100fffffe, 0xff000000, 'caif0\x00', 'syz_tun\x00', {}, {0xff}, 0x40, 0x3, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0xc8e7, 0x2a, 0x400, '\x00', 'syz1\x00', {0x10000000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 5.24171094s ago: executing program 5 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.044164504s ago: executing program 4 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "6c5b1acb23471e53a309d5202bdba2d8", 0x8}}}, 0x1a) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0xfffc, 0x2, 0x8}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x7c, 0x7f, 0x8, 0x3, 0x2, 0x9, "dd88ce2fa5232875e46103e0b46130ee28962177eaf48b8002580c407e6925e45f545feeab3897673b0f1f5e42a767f2ff57b0fd314218900ee11fe0577d95f9776a0781d838676327490c48f26076a7dc3d64ec328514fa42b935d81ae4cb451e129d0a0cdcc71a9db67f216ac32da0f40c5135ca3c81aea57c702d"}}, 0x194) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x23, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x4000010) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x14084, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x483, &(0x7f00000006c0)="$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") mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 4.885632103s ago: executing program 0 (id=2072): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ptrace$peekuser(0x3, r1, 0x1) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x40808) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.637198706s ago: executing program 8 (id=2073): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000000180)=""/65, 0x41) memfd_create(0x0, 0xc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000340)) chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, 0x0, 0x0) fallocate(r2, 0x0, 0xfea000, 0x2000402) lseek(r2, 0x1, 0x3) 4.54675071s ago: executing program 5 (id=2074): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 3.033446098s ago: executing program 0 (id=2075): r0 = socket(0xf, 0x1, 0x40000001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x7, 0x7, 0xff, 0x200, {{0x5, 0x4, 0x1, 0x3a, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @empty, @multicast2}}}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000840)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x84) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) socket$nl_route(0x10, 0x3, 0x0) 2.436674249s ago: executing program 4 (id=2076): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='\x00', 0x1, 0x0, 0x0, 0xfffffffffffffe07) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000005c00)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") r2 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) close(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x60000, 0x3) getdents(r3, &(0x7f0000000380)=""/4085, 0xff5) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r4, 0x0, 0x0, 0x20008000) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) 1.41311845s ago: executing program 8 (id=2077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 1.407995735s ago: executing program 0 (id=2078): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{0x0}], 0x1}}], 0x1, 0x10122, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) ioctl$RNDADDTOENTCNT(r3, 0x40045201, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x71c0, 0x8400) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="f9", 0xca800}], 0x1, 0x3, 0xd4bd) 0s ago: executing program 4 (id=2079): ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000000000)) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x3, 0x5003) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1810002, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="0805c250a09347cb0bca3b9f8a8755b3945d3396e6eb14eb64426210d11830d13cb571b8967902d058a39cf86287f14c080fcb8d529bfcda2a3722d8dc8ebe2c29476750ec92bf56619454329e748b3549ba625812d4422958b334db652bd2b9492784354250a06d9b3f22846434889dbea72d8f13aa590030f83b62254e87e4230846ce6bd18bc79e73a1a1fa67571c3ba78979ed9dfc3410b95c51ce90bcca297c2a6995b236c39c5ec957cf8717fa28a560525b50a3a689d2bc34038bc078356614f0c584b2ae572c025c4d8414161f1100073f6fee746c008cefce574d1c1e0333b07febbd41add7375c604f3c34b6606013a8172cea655aa6580601b3668ac91df25f684745c94ad9ffc15548d32a8608c5acb60bc437052b2dd51eea8957d673499f6f685feefb2332976ce89829d1cd967d7dd29336387ff12a", @ANYRES16, @ANYRES64], 0x1, 0x1cd, &(0x7f0000002180)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) rename(&(0x7f00000001c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x27, 0x366, &(0x7f0000000340)="$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") kernel console output (not intermixed with test programs): scuous mode [ 883.209374][T12948] loop5: detected capacity change from 0 to 7 [ 883.242908][T12948] Dev loop5: unable to read RDB block 7 [ 883.295135][T12948] loop5: AHDI p1 p2 p3 [ 883.342089][T12948] loop5: partition table partially beyond EOD, truncated [ 883.386167][T12948] loop5: p1 start 1818582900 is beyond EOD, truncated [ 883.430927][T12253] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 883.492852][T12948] loop5: p3 start 335544320 is beyond EOD, truncated [ 883.632457][T12253] usb 3-1: Using ep0 maxpacket: 8 [ 884.140347][T12253] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 884.383997][T12804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.406172][T12253] usb 3-1: config 1 interface 0 has no altsetting 0 [ 884.446280][T12253] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 884.461387][T12804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.483955][T12253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.512334][T12253] usb 3-1: Product: ㊬偳㗋픴ヤ逥ڴ믪䟫湶䏓좓΃뜛얶镹广䃩哑휧﹔柨鹘搕ᮦ鶍밽᭙韖掘傇窺鏻⶷ [ 884.559528][T12958] netlink: 'syz.3.1500': attribute type 6 has an invalid length. [ 884.604751][T12253] usb 3-1: Manufacturer: М [ 884.633196][T12253] usb 3-1: SerialNumber: ࠒ [ 884.677273][T12947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 884.730042][T12804] team0: Port device team_slave_0 added [ 884.761438][T12804] team0: Port device team_slave_1 added [ 884.854635][T12966] loop9: detected capacity change from 0 to 128 [ 884.883881][T12966] EXT4-fs (loop9): Test dummy encryption mode enabled [ 884.925740][T12804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.927511][T12966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 884.950091][T12804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.980145][T12253] usb 3-1: USB disconnect, device number 3 [ 885.019323][T12804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.074781][T12804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.091463][T12804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.131173][T12966] System zones: 1-3, 19-19, 35-36 [ 885.154343][T12966] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 885.196877][T12804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.214858][T12966] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.223625][T12804] hsr_slave_0: entered promiscuous mode [ 886.250823][T12804] hsr_slave_1: entered promiscuous mode [ 886.257450][T12804] debugfs: 'hsr0' already exists in 'hsr' [ 886.268553][T12804] Cannot create hsr debugfs directory [ 886.501464][T12981] loop2: detected capacity change from 0 to 64 [ 886.567839][ T9937] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 886.953725][T12981] hfs: inconsistency in B*Tree (4,2,0,3,0) [ 886.959865][T12981] hfs: get root inode failed [ 891.618918][T13014] loop7: detected capacity change from 0 to 4096 [ 891.896597][T13015] loop5: detected capacity change from 0 to 7 [ 891.907043][T13015] Dev loop5: unable to read RDB block 7 [ 891.913265][T13015] loop5: AHDI p1 p2 p3 [ 891.917463][T13015] loop5: partition table partially beyond EOD, truncated [ 891.925651][T13015] loop5: p1 start 1818582900 is beyond EOD, truncated [ 891.933098][T13015] loop5: p3 start 335544320 is beyond EOD, truncated [ 894.509656][T12253] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 895.078402][T13032] loop7: detected capacity change from 0 to 512 [ 895.163005][T13032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.240115][T13032] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 895.299986][T12253] usb 10-1: Using ep0 maxpacket: 8 [ 895.345892][T12253] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 895.401063][T12253] usb 10-1: config 1 interface 0 has no altsetting 0 [ 895.456802][T12253] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 895.471691][T13043] loop2: detected capacity change from 0 to 64 [ 895.479190][T12253] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.531136][T12253] usb 10-1: Product: ㊬偳㗋픴ヤ逥ڴ믪䟫湶䏓좓΃뜛얶镹广䃩哑휧﹔柨鹘搕ᮦ鶍밽᭙韖掘傇窺鏻⶷ [ 895.574788][T12253] usb 10-1: Manufacturer: М [ 895.579882][T12253] usb 10-1: SerialNumber: ࠒ [ 895.840604][T13038] EXT4-fs error (device loop7): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 897.652799][T12253] usb 10-1: can't set config #1, error -71 [ 897.665917][T12253] usb 10-1: USB disconnect, device number 5 [ 897.747147][ T8193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.282587][T13067] loop7: detected capacity change from 0 to 256 [ 902.942615][T12804] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 903.084504][T13099] loop7: detected capacity change from 0 to 64 [ 904.866948][T12804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.888920][T12804] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 905.049771][T13099] hfs: inconsistency in B*Tree (4,2,0,3,0) [ 905.055681][T13099] hfs: get root inode failed [ 905.142120][T12804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.153698][T12804] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 905.476234][T12804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.523687][T12804] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 906.898054][T12804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.542993][T13133] tipc: Started in network mode [ 907.559464][T13133] tipc: Node identity deb4bca71e3a, cluster identity 4711 [ 907.584885][T13133] tipc: Enabled bearer , priority 0 [ 907.675089][T13135] syzkaller0: entered promiscuous mode [ 907.689453][T13135] syzkaller0: entered allmulticast mode [ 907.699652][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 907.762818][T12804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.837309][T13133] tipc: Resetting bearer [ 907.868690][T13131] tipc: Resetting bearer [ 907.869186][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 907.925982][ T30] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 907.938735][T13131] tipc: Disabling bearer [ 907.955162][ T30] usb 1-1: config 1 interface 0 has no altsetting 0 [ 908.052605][ T30] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 908.072375][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.133305][ T30] usb 1-1: Product: ㊬偳㗋픴ヤ逥ڴ믪䟫湶䏓좓΃뜛얶镹广䃩哑휧﹔柨鹘搕ᮦ鶍밽᭙韖掘傇窺鏻⶷ [ 908.192856][ T30] usb 1-1: Manufacturer: М [ 908.211943][ T30] usb 1-1: SerialNumber: ࠒ [ 908.435164][T12804] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.523133][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.530384][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.556213][T13123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 908.646881][T12426] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.654121][T12426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.409031][ T30] usb 1-1: USB disconnect, device number 5 [ 909.915913][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 911.325501][T13171] loop7: detected capacity change from 0 to 1764 [ 911.763302][T13170] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 912.481918][T13185] loop9: detected capacity change from 0 to 64 [ 912.818207][T13185] hfs: inconsistency in B*Tree (4,2,0,3,0) [ 912.824105][T13185] hfs: get root inode failed [ 916.678394][T13208] loop7: detected capacity change from 0 to 256 [ 922.482896][T13250] loop7: detected capacity change from 0 to 16 [ 922.601807][T13250] erofs (device loop7): mounted with root inode @ nid 36. [ 922.851190][T13250] syz.7.1567: attempt to access beyond end of device [ 922.851190][T13250] loop7: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 922.917870][T13250] syz.7.1567: attempt to access beyond end of device [ 922.917870][T13250] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 923.234884][T13250] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 923.248911][T13250] erofs (device loop7): read error -117 @ 1 of nid 89 [ 923.347177][ T31] audit: type=1800 audit(2000000066.242:136): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1567" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 923.668599][T13250] syz.7.1567 (13250) used greatest stack depth: 18592 bytes left [ 923.986034][T13269] loop9: detected capacity change from 0 to 128 [ 924.635281][T13269] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 924.649177][T13269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 924.681342][ T9940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 924.715078][ T9940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 924.843100][ T9940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 924.853504][ T9940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 924.863307][ T9940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.837124][T13283] loop9: detected capacity change from 0 to 512 [ 926.973792][T13286] loop7: detected capacity change from 0 to 128 [ 926.986546][ T9940] Bluetooth: hci1: command tx timeout [ 927.033617][T13283] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 927.060573][T13286] EXT4-fs (loop7): Test dummy encryption mode enabled [ 927.805663][T13283] EXT4-fs (loop9): 1 truncate cleaned up [ 927.814157][T13283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.834331][T13286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 927.863848][T13286] System zones: 1-3, 19-19, 35-36 [ 927.881782][T13286] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 928.140915][T13286] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.073684][ T9940] Bluetooth: hci1: command tx timeout [ 930.638572][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.657323][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.749105][ T8193] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 931.098490][ T9940] Bluetooth: hci1: command tx timeout [ 933.739047][T13335] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 933.750730][T13335] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 935.117873][ T9940] Bluetooth: hci1: command tx timeout [ 938.173725][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 938.389153][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 938.416058][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 938.445594][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 938.454272][T13261] lo speed is unknown, defaulting to 1000 [ 938.466798][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 939.267013][T13363] fuse: fd is not a fuse device [ 940.817964][ T5646] Bluetooth: hci5: command tx timeout [ 942.868017][ T5646] Bluetooth: hci5: command tx timeout [ 943.047661][ T9937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.565030][ T9940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 943.583770][ T9940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 943.599938][ T9940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 943.616732][ T9940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 943.638164][ T9940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 944.288298][T13347] lo speed is unknown, defaulting to 1000 [ 944.700644][T13417] loop0: detected capacity change from 0 to 32768 [ 944.711265][T13417] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1596 (13417) [ 944.757500][T13417] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 944.768613][T13417] BTRFS info (device loop0): using crc32c checksum algorithm [ 944.776211][T13417] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 945.007907][ T5646] Bluetooth: hci5: command tx timeout [ 945.800280][ T5646] Bluetooth: hci3: command tx timeout [ 946.672995][T13417] BTRFS info (device loop0): rebuilding free space tree [ 946.756151][T13417] BTRFS info (device loop0): disabling free space tree [ 946.763227][T13417] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 946.774243][T13417] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 946.810853][T13417] BTRFS info (device loop0): enabling ssd optimizations [ 946.818529][T13417] BTRFS info (device loop0): turning on async discard [ 946.825304][T13417] BTRFS info (device loop0): enabling disk space caching [ 946.832672][T13417] BTRFS info (device loop0): force clearing of disk cache [ 946.840420][T13417] BTRFS info (device loop0): use zstd compression, level 3 [ 947.118008][ T5646] Bluetooth: hci5: command tx timeout [ 947.819046][ T5646] Bluetooth: hci3: command tx timeout [ 948.001781][T11621] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 948.314755][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.380382][T13261] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.419791][T13261] bridge_slave_0: entered allmulticast mode [ 948.471646][T13261] bridge_slave_0: entered promiscuous mode [ 948.577306][T13261] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.557463][T13261] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.786219][T13261] bridge_slave_1: entered allmulticast mode [ 950.020954][ T5646] Bluetooth: hci3: command tx timeout [ 950.618250][T13261] bridge_slave_1: entered promiscuous mode [ 952.062657][ T9940] Bluetooth: hci3: command tx timeout [ 952.249702][T13496] loop7: detected capacity change from 0 to 128 [ 952.340149][T13496] EXT4-fs (loop7): Test dummy encryption mode enabled [ 952.644625][T13502] vivid-001: disconnect [ 952.672222][T13502] vivid-001: reconnect [ 952.893691][T13496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 952.997749][ T37] bridge_slave_1: left allmulticast mode [ 953.071315][T13496] System zones: 1-3, 19-19, 35-36 [ 953.089255][ T37] bridge_slave_1: left promiscuous mode [ 953.120247][T13496] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 953.123273][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.198196][ T37] bridge_slave_0: left allmulticast mode [ 953.212058][T13496] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.222407][ T37] bridge_slave_0: left promiscuous mode [ 953.248758][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.334985][T13509] loop5: detected capacity change from 0 to 7 [ 953.352404][T13509] Dev loop5: unable to read RDB block 7 [ 953.365775][T13509] loop5: AHDI p1 p2 p3 [ 953.373577][T13509] loop5: partition table partially beyond EOD, truncated [ 953.382296][T13509] loop5: p1 start 1818582900 is beyond EOD, truncated [ 953.394765][T13509] loop5: p3 start 335544320 is beyond EOD, truncated [ 953.843801][ T8193] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 953.978544][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.016844][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.045044][ T37] bond0 (unregistering): Released all slaves [ 954.048111][T13522] loop7: detected capacity change from 0 to 512 [ 954.123917][T13522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.147885][T13522] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 954.155438][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.349215][T13529] loop0: detected capacity change from 0 to 1024 [ 954.362593][T13529] hfsplus: invalid btree flag [ 954.369888][T13529] hfsplus: failed to load catalog file [ 954.443925][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.570395][T13534] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1611: iget: bad i_size value: 2533274857506816 [ 955.293091][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 955.339202][ T8193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.668106][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 955.849318][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.102550][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.320967][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.336823][T13393] lo speed is unknown, defaulting to 1000 [ 956.348967][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.367017][ T24] usb 1-1: Product: syz [ 956.378791][ T24] usb 1-1: Manufacturer: syz [ 956.388053][ T24] usb 1-1: SerialNumber: syz [ 956.420146][T13261] team0: Port device team_slave_0 added [ 956.429684][T13261] team0: Port device team_slave_1 added [ 956.501632][ T24] usb 1-1: 0:2 : does not exist [ 956.651723][T13261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.659515][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.686260][T13261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.398800][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 957.704029][T13261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.761487][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.891891][T13261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.939881][ T37] hsr_slave_0: left promiscuous mode [ 957.960230][ T37] hsr_slave_1: left promiscuous mode [ 957.979639][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.000295][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.922767][ T24] usb 1-1: USB disconnect, device number 6 [ 959.557112][T13572] loop5: detected capacity change from 0 to 7 [ 960.084037][T13572] Dev loop5: unable to read RDB block 7 [ 960.107521][T13572] loop5: AHDI p1 p2 p3 [ 960.125332][T13572] loop5: partition table partially beyond EOD, truncated [ 960.161061][T13572] loop5: p1 start 1818582900 is beyond EOD, truncated [ 960.205711][T13572] loop5: p3 start 335544320 is beyond EOD, truncated [ 960.321543][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.523785][T13584] loop0: detected capacity change from 0 to 2048 [ 960.609723][T13584] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 961.010782][T13584] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 961.348185][T13584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 961.645512][T13594] loop7: detected capacity change from 0 to 64 [ 963.818179][ T37] team0 (unregistering): Port device team_slave_1 removed [ 963.917588][ T37] team0 (unregistering): Port device team_slave_0 removed [ 971.145571][T13261] hsr_slave_0: entered promiscuous mode [ 971.191201][T13261] hsr_slave_1: entered promiscuous mode [ 971.214696][T13261] debugfs: 'hsr0' already exists in 'hsr' [ 971.222051][T13261] Cannot create hsr debugfs directory [ 971.231630][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.459358][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.467300][T13347] bridge_slave_0: entered allmulticast mode [ 971.475568][T13347] bridge_slave_0: entered promiscuous mode [ 971.484913][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.494306][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.501929][T13347] bridge_slave_1: entered allmulticast mode [ 971.510298][T13347] bridge_slave_1: entered promiscuous mode [ 972.241771][ T9940] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 974.287028][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.321523][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.536759][T13347] team0: Port device team_slave_0 added [ 974.547198][T13347] team0: Port device team_slave_1 added [ 974.973669][T13685] loop7: detected capacity change from 0 to 2048 [ 975.427529][T13689] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 975.537669][T13688] loop0: detected capacity change from 0 to 32768 [ 975.585951][T13688] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 975.915588][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.923077][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.952317][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.827133][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.842490][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.904299][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.938706][T11621] ocfs2: Unmounting device (7,0) on (node local) [ 979.616033][T13347] hsr_slave_0: entered promiscuous mode [ 979.884485][T13347] hsr_slave_1: entered promiscuous mode [ 979.925408][T13347] debugfs: 'hsr0' already exists in 'hsr' [ 980.656679][T13347] Cannot create hsr debugfs directory [ 980.871238][T13732] loop0: detected capacity change from 0 to 32768 [ 980.930007][T13732] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 982.617096][ T9940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 982.787500][ T9940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 982.795753][ T9940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 982.804859][ T9940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 982.813292][ T9940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 983.911284][T11621] ocfs2: Unmounting device (7,0) on (node local) [ 984.585588][T13765] netlink: 'syz.7.1657': attribute type 6 has an invalid length. [ 984.656661][T13768] sctp: [Deprecated]: syz.3.1658 (pid 13768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 984.656661][T13768] Use struct sctp_sack_info instead [ 985.189537][T13774] loop0: detected capacity change from 0 to 2048 [ 985.279676][T13774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.341282][ T9940] Bluetooth: hci6: command tx timeout [ 986.074722][T13797] loop7: detected capacity change from 0 to 64 [ 986.155140][T13393] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.239698][T13393] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.309978][T13393] bridge_slave_0: entered allmulticast mode [ 986.320125][T13393] bridge_slave_0: entered promiscuous mode [ 986.350785][T11621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.198897][T13393] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.251898][T13393] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.274985][T13393] bridge_slave_1: entered allmulticast mode [ 987.332177][T13393] bridge_slave_1: entered promiscuous mode [ 988.607010][ T9940] Bluetooth: hci6: command tx timeout [ 988.991989][T13814] loop0: detected capacity change from 0 to 128 [ 989.083407][T13814] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 989.238197][T13814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.972884][T13393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.111772][T13393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.616567][ T9940] Bluetooth: hci6: command tx timeout [ 990.763046][T13747] lo speed is unknown, defaulting to 1000 [ 991.979105][T13393] team0: Port device team_slave_0 added [ 992.014186][T13393] team0: Port device team_slave_1 added [ 992.178739][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.431243][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.696975][ T9940] Bluetooth: hci6: command tx timeout [ 993.848667][T13347] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.893248][T12253] libceph: connect (1)[c::]:6789 error -101 [ 993.935547][T12253] libceph: mon0 (1)[c::]:6789 connect error [ 993.988877][T12253] libceph: connect (1)[c::]:6789 error -101 [ 994.005655][T13839] ceph: No mds server is up or the cluster is laggy [ 994.027185][T12253] libceph: mon0 (1)[c::]:6789 connect error [ 994.362289][T13862] loop7: detected capacity change from 0 to 32768 [ 994.370075][T13862] btrfs: Deprecated parameter 'usebackuproot' [ 994.376460][T13862] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 994.389851][T12253] libceph: connect (1)[c::]:6789 error -101 [ 994.417767][T12253] libceph: mon0 (1)[c::]:6789 connect error [ 994.661901][T13862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1673 (13862) [ 994.692704][T13393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.757807][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.763274][T13862] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 994.794800][T13862] BTRFS info (device loop7): using crc32c checksum algorithm [ 994.828623][T13393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.046072][ T8010] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 995.131138][T13393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.142632][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.175645][ T5646] Bluetooth: hci0: unexpected event for opcode 0x040d [ 995.183625][T13393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.195298][T13862] BTRFS error (device loop7): failed to load root extent [ 995.202554][T13862] BTRFS warning (device loop7): try to load backup roots slot 1 [ 995.214990][ T6150] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 995.266699][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 995.390310][ T31] audit: type=1326 audit(2000000146.249:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 995.421948][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 996.103145][T13862] BTRFS warning (device loop7): couldn't read tree root [ 996.110372][T13862] BTRFS warning (device loop7): try to load backup roots slot 2 [ 996.140719][ T8010] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 996.196392][ T31] audit: type=1326 audit(2000000146.249:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 996.243131][T13862] BTRFS warning (device loop7): couldn't read tree root [ 996.251593][T13862] BTRFS warning (device loop7): try to load backup roots slot 3 [ 996.338992][T13862] BTRFS info (device loop7): rebuilding free space tree [ 996.404537][T13862] BTRFS info (device loop7): checking UUID tree [ 996.411505][T13862] BTRFS info (device loop7): enabling ssd optimizations [ 996.420246][T13862] BTRFS info (device loop7): turning on async discard [ 996.427362][T13862] BTRFS info (device loop7): enabling free space tree [ 996.434154][T13862] BTRFS info (device loop7): force clearing of disk cache [ 996.443233][T13862] BTRFS info (device loop7): trying to use backup root at mount time [ 996.452718][T13862] BTRFS info (device loop7): force zlib compression, level 3 [ 996.478418][ T31] audit: type=1326 audit(2000000146.249:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 996.567864][ T31] audit: type=1326 audit(2000000146.249:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 996.635457][T13347] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.673167][ T31] audit: type=1326 audit(2000000146.249:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 996.956210][ T31] audit: type=1326 audit(2000000146.249:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 997.020628][ T31] audit: type=1326 audit(2000000147.079:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 997.641399][ T9940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 997.660947][ T9940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 997.686266][ T9940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 997.696739][ T9940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 997.707015][ T9940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 997.742515][ T31] audit: type=1326 audit(2000000147.079:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 998.113992][T13909] loop0: detected capacity change from 0 to 64 [ 998.133046][T13347] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.284964][ T8193] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 998.520922][ T8010] bridge_slave_1: left allmulticast mode [ 998.528609][ T8010] bridge_slave_1: left promiscuous mode [ 998.534576][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.559354][ T8010] bridge_slave_0: left allmulticast mode [ 998.579673][ T8010] bridge_slave_0: left promiscuous mode [ 998.595726][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.893563][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.090683][T13915] loop7: detected capacity change from 0 to 2048 [ 999.100762][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.159308][T13915] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 999.179900][T13915] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 999.214002][ T8010] bond0 (unregistering): Released all slaves [ 999.561102][T13915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 999.816484][ T5646] Bluetooth: hci1: command tx timeout [ 999.875473][T13921] loop0: detected capacity change from 0 to 16 [ 999.905397][T13393] hsr_slave_0: entered promiscuous mode [ 1000.212747][T13921] erofs (device loop0): mounted with root inode @ nid 36. [ 1000.233285][T13393] hsr_slave_1: entered promiscuous mode [ 1000.271067][T13393] debugfs: 'hsr0' already exists in 'hsr' [ 1000.424418][T13393] Cannot create hsr debugfs directory [ 1001.000184][T13921] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 1001.180360][T13930] overlayfs: failed to clone upperpath [ 1001.250647][T13347] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.939334][ T5646] Bluetooth: hci1: command tx timeout [ 1002.016268][ T31] audit: type=1326 audit(2000000152.859:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.467883][ T31] audit: type=1326 audit(2000000152.859:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.550869][ T31] audit: type=1326 audit(2000000152.869:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.618531][ T8010] hsr_slave_0: left promiscuous mode [ 1002.634099][ T31] audit: type=1326 audit(2000000152.869:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.738841][ T31] audit: type=1326 audit(2000000152.869:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.797899][ T31] audit: type=1326 audit(2000000152.879:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.856004][ T31] audit: type=1326 audit(2000000152.889:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.914023][ T31] audit: type=1326 audit(2000000152.889:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1002.929435][ T8010] hsr_slave_1: left promiscuous mode [ 1002.986848][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.991156][T13950] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 1003.013253][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.656480][ T31] audit: type=1326 audit(2000000152.899:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1003.724744][ T31] audit: type=1326 audit(2000000152.899:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13934 comm="syz.0.1686" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1004.046091][ T5646] Bluetooth: hci1: command tx timeout [ 1004.068640][ T5646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1004.084697][ T5646] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1004.096513][ T5646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1004.107211][ T5646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1004.122301][ T5646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1004.650386][ T8010] team0 (unregistering): Port device team_slave_1 removed [ 1004.681323][ T8010] team0 (unregistering): Port device team_slave_0 removed [ 1004.895051][T13963] loop7: detected capacity change from 0 to 64 [ 1005.602686][T13969] loop0: detected capacity change from 0 to 32768 [ 1005.612804][T13969] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1692 (13969) [ 1005.640962][T13969] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1005.651384][T13969] BTRFS info (device loop0): using crc32c checksum algorithm [ 1005.661581][T13969] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1005.871920][T13969] BTRFS info (device loop0): rebuilding free space tree [ 1005.942148][T13969] BTRFS info (device loop0): disabling free space tree [ 1005.949264][T13969] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1005.959129][T13969] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1006.005384][T13969] BTRFS info (device loop0): enabling ssd optimizations [ 1006.012982][T13969] BTRFS info (device loop0): turning on async discard [ 1006.019913][T13969] BTRFS info (device loop0): enabling disk space caching [ 1006.027966][T13969] BTRFS info (device loop0): force clearing of disk cache [ 1006.035218][T13969] BTRFS info (device loop0): use zstd compression, level 3 [ 1006.371048][ T9940] Bluetooth: hci1: command tx timeout [ 1006.380676][ T9940] Bluetooth: hci7: command tx timeout [ 1007.886609][T11621] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1007.987081][T13899] lo speed is unknown, defaulting to 1000 [ 1008.456004][ T9940] Bluetooth: hci7: command tx timeout [ 1010.558476][ T9940] Bluetooth: hci7: command tx timeout [ 1010.964258][T14031] loop0: detected capacity change from 0 to 64 [ 1011.787924][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.796093][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.813627][T13747] bridge_slave_0: entered allmulticast mode [ 1011.840668][T13747] bridge_slave_0: entered promiscuous mode [ 1011.870241][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.907806][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.938904][T13747] bridge_slave_1: entered allmulticast mode [ 1011.981261][T13747] bridge_slave_1: entered promiscuous mode [ 1012.052293][T14036] loop7: detected capacity change from 0 to 128 [ 1012.266388][T14036] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1012.294662][T14036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1012.393308][ T5866] IPVS: starting estimator thread 0... [ 1012.447523][T14036] System zones: 1-3, 19-19, 35-36 [ 1012.496195][T14044] IPVS: using max 22 ests per chain, 52800 per kthread [ 1012.696466][ T9940] Bluetooth: hci7: command tx timeout [ 1013.022108][T14036] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1013.180333][T14036] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.440575][ T8010] bridge_slave_1: left allmulticast mode [ 1013.457890][ T8010] bridge_slave_1: left promiscuous mode [ 1013.913501][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.940016][ T8193] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1013.985977][ T8010] bridge_slave_0: left allmulticast mode [ 1013.997766][ T8010] bridge_slave_0: left promiscuous mode [ 1014.021949][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.410703][T14056] loop7: detected capacity change from 0 to 32768 [ 1014.418388][T14056] btrfs: Deprecated parameter 'usebackuproot' [ 1014.425657][T14056] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1014.450171][T14056] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1707 (14056) [ 1015.119897][ T8010] bridge_slave_1: left allmulticast mode [ 1015.139479][ T8010] bridge_slave_1: left promiscuous mode [ 1015.150692][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.166203][T14056] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1015.177359][T14056] BTRFS info (device loop7): using crc32c checksum algorithm [ 1015.274228][ T8010] bridge_slave_0: left allmulticast mode [ 1015.280852][ T8010] bridge_slave_0: left promiscuous mode [ 1015.289730][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.376801][ T1329] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1015.506174][T14056] BTRFS error (device loop7): failed to load root extent [ 1015.513487][T14056] BTRFS warning (device loop7): try to load backup roots slot 1 [ 1015.532633][ T8012] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1015.585061][T14056] BTRFS warning (device loop7): couldn't read tree root [ 1015.592509][T14056] BTRFS warning (device loop7): try to load backup roots slot 2 [ 1015.612764][ T8012] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1015.648216][T14056] BTRFS warning (device loop7): couldn't read tree root [ 1015.655691][T14056] BTRFS warning (device loop7): try to load backup roots slot 3 [ 1016.053324][T14075] loop0: detected capacity change from 0 to 16 [ 1016.199643][T14075] erofs: Unknown parameter '' [ 1016.220522][T14056] BTRFS info (device loop7): rebuilding free space tree [ 1016.323390][T14056] BTRFS info (device loop7): checking UUID tree [ 1016.334331][T14056] BTRFS info (device loop7): enabling ssd optimizations [ 1016.345747][T14056] BTRFS info (device loop7): turning on async discard [ 1016.352562][T14056] BTRFS info (device loop7): enabling free space tree [ 1016.360750][T14056] BTRFS info (device loop7): force clearing of disk cache [ 1016.368481][T14056] BTRFS info (device loop7): trying to use backup root at mount time [ 1016.376872][T14056] BTRFS info (device loop7): force zlib compression, level 3 [ 1016.459311][T14082] loop0: detected capacity change from 0 to 512 [ 1016.634491][T14082] EXT4-fs: Mount option(s) incompatible with ext2 [ 1016.990191][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.858257][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.861483][ T8193] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1017.972377][ T8010] bond0 (unregistering): Released all slaves [ 1018.695132][T14095] loop0: detected capacity change from 0 to 128 [ 1018.797686][T14095] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1018.811308][T14095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1019.253967][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.696181][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.726485][ T8010] bond0 (unregistering): Released all slaves [ 1020.899461][T14112] fuse: fd is not a fuse device [ 1021.818105][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.852765][T14115] loop0: detected capacity change from 0 to 64 [ 1021.898498][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.082679][T13956] lo speed is unknown, defaulting to 1000 [ 1028.039111][T13747] team0: Port device team_slave_0 added [ 1028.537764][T13747] team0: Port device team_slave_1 added [ 1029.977269][ T8010] hsr_slave_0: left promiscuous mode [ 1030.029893][ T8010] hsr_slave_1: left promiscuous mode [ 1030.056923][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.282241][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.972987][T14184] loop7: detected capacity change from 0 to 64 [ 1031.241551][ T8010] hsr_slave_0: left promiscuous mode [ 1031.275558][ T8010] hsr_slave_1: left promiscuous mode [ 1031.319932][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.362130][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.384923][T14189] loop0: detected capacity change from 0 to 64 [ 1033.631706][T14202] QAT: Device 2 not found [ 1034.445798][ T8010] team0 (unregistering): Port device team_slave_1 removed [ 1034.564367][ T8010] team0 (unregistering): Port device team_slave_0 removed [ 1037.345522][T14221] loop0: detected capacity change from 0 to 32768 [ 1037.357295][T14221] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1741 (14221) [ 1037.723198][T14221] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1037.734841][T14221] BTRFS info (device loop0): using sha256 checksum algorithm [ 1037.822478][T14228] loop7: detected capacity change from 0 to 64 [ 1038.377443][T14221] BTRFS info (device loop0): setting nodatasum [ 1038.384076][T14221] BTRFS info (device loop0): enabling ssd optimizations [ 1038.391235][T14221] BTRFS info (device loop0): turning on async discard [ 1038.398164][T14221] BTRFS info (device loop0): enabling free space tree [ 1038.783391][T14249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.842691][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1038.842714][ T31] audit: type=1800 audit(2000000189.780:159): pid=14249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1741" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1039.218642][ T31] audit: type=1326 audit(2000000189.850:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.0.1741" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1039.333285][ T31] audit: type=1326 audit(2000000189.850:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.0.1741" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1039.404213][T14253] loop5: detected capacity change from 0 to 7 [ 1039.429740][ T31] audit: type=1326 audit(2000000189.850:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.0.1741" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1039.455007][ T31] audit: type=1326 audit(2000000189.860:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.0.1741" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1039.458049][T14253] Dev loop5: unable to read RDB block 7 [ 1039.484170][ T31] audit: type=1326 audit(2000000189.860:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.0.1741" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9d9cdd9 code=0x7ffc0000 [ 1039.558749][T14253] loop5: AHDI p1 p2 p3 [ 1039.575190][T14253] loop5: partition table partially beyond EOD, truncated [ 1039.583799][T14253] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1039.603289][T14253] loop5: p3 start 335544320 is beyond EOD, truncated [ 1039.628767][T11621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.662878][ T8010] team0 (unregistering): Port device team_slave_1 removed [ 1040.800589][ T8010] team0 (unregistering): Port device team_slave_0 removed [ 1041.443272][T14262] x_tables: duplicate underflow at hook 1 [ 1042.156037][T12270] udevd[12270]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1042.391794][T12270] udevd[12270]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1042.478745][T12270] udevd[12270]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1042.697199][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1042.726769][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1042.743579][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1042.757378][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1042.766442][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.207054][T14272] loop7: detected capacity change from 0 to 128 [ 1043.233082][T14272] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1043.383000][T14272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1043.457685][T14272] System zones: 1-3, 19-19, 35-36 [ 1043.811278][T14272] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1043.911803][T14272] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.788896][ T8193] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1044.883383][ T5646] Bluetooth: hci3: command tx timeout [ 1045.653507][T13899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.706290][T13899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.735014][T13899] bridge_slave_0: entered allmulticast mode [ 1045.792974][T13899] bridge_slave_0: entered promiscuous mode [ 1045.942580][T13899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.952308][T13899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.239121][T13899] bridge_slave_1: entered allmulticast mode [ 1046.260164][T13899] bridge_slave_1: entered promiscuous mode [ 1046.942813][ T5646] Bluetooth: hci3: command tx timeout [ 1047.617667][ T31] audit: type=1326 audit(2000000198.550:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.068193][ T31] audit: type=1326 audit(2000000198.550:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.097444][ T31] audit: type=1326 audit(2000000198.560:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.123671][ T31] audit: type=1326 audit(2000000198.560:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.149054][ T31] audit: type=1326 audit(2000000198.560:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.176453][ T31] audit: type=1326 audit(2000000198.570:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.204041][ T31] audit: type=1326 audit(2000000198.570:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.230533][ T31] audit: type=1326 audit(2000000198.570:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.304548][ T31] audit: type=1326 audit(2000000198.580:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.370434][T13899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.513015][T13899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.539415][ T31] audit: type=1326 audit(2000000198.580:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14308 comm="syz.3.1754" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafea19cdd9 code=0x7ffc0000 [ 1048.938759][T14323] fuse: fd is not a fuse device [ 1049.061105][ T5646] Bluetooth: hci3: command tx timeout [ 1049.790070][T13899] team0: Port device team_slave_0 added [ 1050.647767][T13899] team0: Port device team_slave_1 added [ 1050.691743][T14267] lo speed is unknown, defaulting to 1000 [ 1050.838286][T13899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.867800][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.941684][T13899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.963885][T13899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.974702][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.003899][T13899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.185429][ T9940] Bluetooth: hci3: command tx timeout [ 1052.307412][T14336] loop7: detected capacity change from 0 to 40427 [ 1052.335840][T14336] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1052.343687][T14336] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1052.355555][T14336] F2FS-fs (loop7): invalid crc value [ 1052.427729][T14336] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1052.447890][T14336] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1052.455332][T14336] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1052.659554][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1052.659575][ T31] audit: type=1800 audit(2000000203.641:179): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1760" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1053.111431][ T8010] bridge_slave_1: left allmulticast mode [ 1053.279830][ T8010] bridge_slave_1: left promiscuous mode [ 1053.545654][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.584933][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.633540][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.758002][ T8010] bridge_slave_0: left allmulticast mode [ 1053.786500][ T8010] bridge_slave_0: left promiscuous mode [ 1053.812884][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.097807][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.163517][ T1088] kworker/u8:7: attempt to access beyond end of device [ 1054.163517][ T1088] loop7: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 1054.190418][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.210905][ T8010] bond0 (unregistering): Released all slaves [ 1054.311286][ T1088] kworker/u8:7: attempt to access beyond end of device [ 1054.311286][ T1088] loop7: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1054.345829][T12253] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1054.618209][ T1088] kworker/u8:7: attempt to access beyond end of device [ 1054.618209][ T1088] loop7: rw=1, sector=57344, nr_sectors = 6584 limit=40427 [ 1054.813419][T13899] hsr_slave_0: entered promiscuous mode [ 1054.828883][T13899] hsr_slave_1: entered promiscuous mode [ 1054.836137][T13899] debugfs: 'hsr0' already exists in 'hsr' [ 1054.843007][T13899] Cannot create hsr debugfs directory [ 1055.595926][ T8010] team0 (unregistering): Port device team_slave_1 removed [ 1055.707893][ T8010] team0 (unregistering): Port device team_slave_0 removed [ 1055.936499][T14361] fuse: fd is not a fuse device [ 1057.394576][T13956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.407916][T13956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.459466][T13956] bridge_slave_0: entered allmulticast mode [ 1057.482811][T13956] bridge_slave_0: entered promiscuous mode [ 1057.491698][T13956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.498999][T13956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.508241][T13956] bridge_slave_1: entered allmulticast mode [ 1057.548254][T13956] bridge_slave_1: entered promiscuous mode [ 1057.917734][ T5756] bridge0: entered promiscuous mode [ 1058.068547][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1772'. [ 1058.777135][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1058.796252][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1058.808892][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1058.817403][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1058.825866][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1058.947445][T13956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.003921][T13956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.271472][T13956] team0: Port device team_slave_0 added [ 1059.290691][T13956] team0: Port device team_slave_1 added [ 1060.943784][ T5646] Bluetooth: hci5: command tx timeout [ 1060.976686][T13956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.985739][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.013818][T13956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.027461][T13956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.035748][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.062146][T13956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.477983][ T8014] bridge_slave_1: left allmulticast mode [ 1061.518764][ T8014] bridge_slave_1: left promiscuous mode [ 1061.542822][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.608667][ T8014] bridge_slave_0: left allmulticast mode [ 1061.638652][ T8014] bridge_slave_0: left promiscuous mode [ 1061.663144][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.935613][ T8014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.024615][ T5646] Bluetooth: hci5: command tx timeout [ 1063.048096][ T8014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.156893][ T8014] bond0 (unregistering): Released all slaves [ 1063.394439][T14428] loop7: detected capacity change from 0 to 64 [ 1063.410205][T14267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.697288][T14267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.737406][T14267] bridge_slave_0: entered allmulticast mode [ 1063.756852][T14267] bridge_slave_0: entered promiscuous mode [ 1063.802097][ T9940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1063.819789][ T9940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1063.819890][ T8014] hsr_slave_0: left promiscuous mode [ 1063.842306][ T9940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1063.905712][ T9940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1063.917818][ T9940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1063.957649][ T8014] hsr_slave_1: left promiscuous mode [ 1063.979410][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.022347][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.194383][ T5646] Bluetooth: hci5: command tx timeout [ 1065.974047][ T5646] Bluetooth: hci1: command tx timeout [ 1066.049341][ T8014] team0 (unregistering): Port device team_slave_1 removed [ 1066.106776][ T8014] team0 (unregistering): Port device team_slave_0 removed [ 1066.528332][T14267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.547989][T14267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.565776][T14267] bridge_slave_1: entered allmulticast mode [ 1066.663184][T14267] bridge_slave_1: entered promiscuous mode [ 1067.254028][ T5646] Bluetooth: hci5: command tx timeout [ 1067.324125][T14267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.428315][T14267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.542000][T14389] lo speed is unknown, defaulting to 1000 [ 1067.550984][T14267] team0: Port device team_slave_0 added [ 1068.416683][ T9940] Bluetooth: hci1: command tx timeout [ 1068.558994][T14267] team0: Port device team_slave_1 added [ 1069.119022][T14267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.148930][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.255176][T14267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.319960][T14267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.349961][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.426460][T14267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.535407][ T9940] Bluetooth: hci1: command tx timeout [ 1070.922634][T14267] hsr_slave_0: entered promiscuous mode [ 1070.929689][T14267] hsr_slave_1: entered promiscuous mode [ 1070.936960][T14267] debugfs: 'hsr0' already exists in 'hsr' [ 1070.955171][T14267] Cannot create hsr debugfs directory [ 1072.613825][ T9940] Bluetooth: hci1: command tx timeout [ 1072.638927][ T8014] bridge_slave_1: left allmulticast mode [ 1072.649077][ T8014] bridge_slave_1: left promiscuous mode [ 1072.854472][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.889433][ T8014] bridge_slave_0: left allmulticast mode [ 1072.914480][ T8014] bridge_slave_0: left promiscuous mode [ 1073.113561][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.849722][ T8014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.862306][ T8014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.876833][ T8014] bond0 (unregistering): Released all slaves [ 1073.940685][T14431] lo speed is unknown, defaulting to 1000 [ 1077.615506][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.639452][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.746685][ T8014] team0 (unregistering): Port device team_slave_1 removed [ 1077.827899][ T8014] team0 (unregistering): Port device team_slave_0 removed [ 1080.694879][T14538] input: syz0 as /devices/virtual/input/input10 [ 1081.156663][T14545] udevd[14545]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1084.102096][T14574] netlink: 'syz.7.1803': attribute type 4 has an invalid length. [ 1084.781693][T14572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1085.155700][T14572] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1085.187726][T14572] overlayfs: failed to look up (tracing) for ino (-66) [ 1088.830001][T14267] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1088.850338][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.871073][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.892538][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.160606][T14389] bridge_slave_0: entered allmulticast mode [ 1089.603550][T14389] bridge_slave_0: entered promiscuous mode [ 1089.732329][T14267] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1089.907202][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.169001][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.191468][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.213694][T14389] bridge_slave_1: entered allmulticast mode [ 1090.231547][T14389] bridge_slave_1: entered promiscuous mode [ 1090.255109][T14267] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1092.355290][T14618] block device autoloading is deprecated and will be removed. [ 1092.397969][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1092.502021][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.389275][T14267] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1093.438167][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1093.690745][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.733744][T14389] team0: Port device team_slave_0 added [ 1094.755412][T14389] team0: Port device team_slave_1 added [ 1094.769806][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 1094.815406][T14431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.825937][T14431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.609820][T14431] bridge_slave_0: entered allmulticast mode [ 1095.618327][T14431] bridge_slave_0: entered promiscuous mode [ 1095.768255][T14431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.778263][T14431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.955427][T14431] bridge_slave_1: entered allmulticast mode [ 1095.964460][T14431] bridge_slave_1: entered promiscuous mode [ 1096.094139][T14652] program syz.7.1828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1096.105382][T14652] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1097.026476][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.034973][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.063926][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.102781][T14431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.464222][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.500967][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.593733][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.624273][T14431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.292460][T14431] team0: Port device team_slave_0 added [ 1100.314184][T14431] team0: Port device team_slave_1 added [ 1101.291606][T14431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.302417][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.356745][T14431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.550620][T14389] hsr_slave_0: entered promiscuous mode [ 1101.676587][T14389] hsr_slave_1: entered promiscuous mode [ 1101.818313][T14389] debugfs: 'hsr0' already exists in 'hsr' [ 1101.855208][T14389] Cannot create hsr debugfs directory [ 1101.956543][T14431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.008290][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.121777][T14431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.402213][T14431] hsr_slave_0: entered promiscuous mode [ 1102.422818][T14431] hsr_slave_1: entered promiscuous mode [ 1102.431376][T14431] debugfs: 'hsr0' already exists in 'hsr' [ 1102.445285][T14431] Cannot create hsr debugfs directory [ 1105.545529][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1105.735595][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1105.751408][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1105.839605][T14704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1105.952182][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1105.972331][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1108.024247][T14714] syzkaller0: entered promiscuous mode [ 1108.043562][T14714] syzkaller0: entered allmulticast mode [ 1108.311157][T14431] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.324138][T14431] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.430936][T14431] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.453526][T14431] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.534568][ T9940] Bluetooth: hci3: command tx timeout [ 1108.599458][T14431] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.610597][T14431] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.682737][T14431] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.695102][T14431] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.726748][T14699] lo speed is unknown, defaulting to 1000 [ 1110.612872][ T9940] Bluetooth: hci3: command tx timeout [ 1111.706971][ T6237] bridge_slave_1: left allmulticast mode [ 1111.727704][ T6237] bridge_slave_1: left promiscuous mode [ 1111.748145][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.765415][ T6237] bridge_slave_0: left allmulticast mode [ 1111.780682][ T6237] bridge_slave_0: left promiscuous mode [ 1111.797529][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.722744][ T9940] Bluetooth: hci3: command tx timeout [ 1114.772742][ T9940] Bluetooth: hci3: command tx timeout [ 1115.215921][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.286904][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.277217][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.500829][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.515536][ T6237] bond0 (unregistering): Released all slaves [ 1119.672809][ T6237] hsr_slave_0: left promiscuous mode [ 1119.726953][ T6237] hsr_slave_1: left promiscuous mode [ 1119.759809][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.976722][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.540005][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1121.556772][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1121.566717][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1121.578840][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1121.592987][ T5646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1123.652201][ T5646] Bluetooth: hci6: command tx timeout [ 1124.090147][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 1124.709818][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 1126.102285][ T5646] Bluetooth: hci6: command tx timeout [ 1126.702751][ T9940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1126.744032][ T9940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1126.758293][ T9940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1126.767670][ T9940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1126.844388][ T9940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1128.704551][ T9940] Bluetooth: hci6: command tx timeout [ 1129.813682][T14860] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 1130.772345][ T5646] Bluetooth: hci6: command tx timeout [ 1130.913655][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1131.337123][ T5646] Bluetooth: hci5: command tx timeout [ 1133.072460][T14699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.105154][T14699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.122788][T14699] bridge_slave_0: entered allmulticast mode [ 1133.160055][T14699] bridge_slave_0: entered promiscuous mode [ 1133.196948][T14699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.247350][T14699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.282752][T14699] bridge_slave_1: entered allmulticast mode [ 1133.306125][T14699] bridge_slave_1: entered promiscuous mode [ 1133.412474][ T5646] Bluetooth: hci5: command tx timeout [ 1133.494748][T14699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.585465][T14699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.608348][T14814] lo speed is unknown, defaulting to 1000 [ 1133.641556][T14847] lo speed is unknown, defaulting to 1000 [ 1133.799596][T14699] team0: Port device team_slave_0 added [ 1133.847559][T14699] team0: Port device team_slave_1 added [ 1134.055993][T14699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.063748][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.094506][T14699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.130172][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1134.149352][T14699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.156790][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.185632][T14699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.315368][T14699] hsr_slave_0: entered promiscuous mode [ 1134.324159][T14699] hsr_slave_1: entered promiscuous mode [ 1134.330966][T14699] debugfs: 'hsr0' already exists in 'hsr' [ 1134.337552][T14699] Cannot create hsr debugfs directory [ 1135.176761][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1135.208152][ T6237] bridge_slave_1: left allmulticast mode [ 1135.213952][ T6237] bridge_slave_1: left promiscuous mode [ 1135.220738][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.230619][ T6237] bridge_slave_0: left allmulticast mode [ 1135.237865][ T6237] bridge_slave_0: left promiscuous mode [ 1135.243887][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.373411][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.384652][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.395253][ T6237] bond0 (unregistering): Released all slaves [ 1135.492247][ T5646] Bluetooth: hci5: command tx timeout [ 1135.502218][T14814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.510492][T14814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.520572][T14814] bridge_slave_0: entered allmulticast mode [ 1135.533807][T14814] bridge_slave_0: entered promiscuous mode [ 1135.602973][T14814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.610850][T14814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.618791][T14814] bridge_slave_1: entered allmulticast mode [ 1135.629820][T14814] bridge_slave_1: entered promiscuous mode [ 1135.670024][ T6237] hsr_slave_0: left promiscuous mode [ 1135.676276][ T6237] hsr_slave_1: left promiscuous mode [ 1135.683033][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.691019][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.837721][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 1135.855748][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 1136.029055][T14847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.036726][T14847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.046230][T14847] bridge_slave_0: entered allmulticast mode [ 1136.054939][T14847] bridge_slave_0: entered promiscuous mode [ 1136.127817][T14814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.142662][T14814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.190750][T14847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.199225][T14847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.206851][T14847] bridge_slave_1: entered allmulticast mode [ 1136.215372][T14847] bridge_slave_1: entered promiscuous mode [ 1136.270084][T14814] team0: Port device team_slave_0 added [ 1136.366949][T14847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.381154][T14847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.395545][T14814] team0: Port device team_slave_1 added [ 1136.515138][T14847] team0: Port device team_slave_0 added [ 1136.523584][T14814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.532522][T14814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.559610][T14814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.575181][T14814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.583250][T14814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.610000][T14814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.625213][T14847] team0: Port device team_slave_1 added [ 1136.718884][T14847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.725904][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.753930][T14847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.768546][T14847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.775808][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.803066][T14847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.918252][T14814] hsr_slave_0: entered promiscuous mode [ 1136.927317][T14814] hsr_slave_1: entered promiscuous mode [ 1136.955344][T14814] debugfs: 'hsr0' already exists in 'hsr' [ 1136.963352][T14814] Cannot create hsr debugfs directory [ 1137.000408][T14847] hsr_slave_0: entered promiscuous mode [ 1137.008347][T14847] hsr_slave_1: entered promiscuous mode [ 1137.019883][T14847] debugfs: 'hsr0' already exists in 'hsr' [ 1137.028129][T14847] Cannot create hsr debugfs directory [ 1137.188575][T14699] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1137.212834][T14699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.259498][T14699] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1137.273585][T14699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.357998][T14699] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1137.381126][T14699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.425452][T14699] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1137.436772][T14699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.517595][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1137.581727][ T5646] Bluetooth: hci5: command tx timeout [ 1137.839628][ T6237] bridge_slave_1: left allmulticast mode [ 1137.846555][ T6237] bridge_slave_1: left promiscuous mode [ 1137.853059][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.864186][ T6237] bridge_slave_0: left allmulticast mode [ 1137.869908][ T6237] bridge_slave_0: left promiscuous mode [ 1137.876302][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.992278][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.004806][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.017591][ T6237] bond0 (unregistering): Released all slaves [ 1138.168781][ T6237] hsr_slave_0: left promiscuous mode [ 1138.196528][ T6237] hsr_slave_1: left promiscuous mode [ 1138.204397][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.218800][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.472178][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 1138.505216][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 1138.833611][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1138.867049][T14699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.988046][T14699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.010493][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.017749][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.103912][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.111643][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.269248][T14699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.386430][T14847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1140.416998][T14847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1140.435741][T14847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1140.454324][T14847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1140.464324][T14847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1140.479294][T14847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1140.494514][T14847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1140.514557][T14847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1140.780571][T14814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1140.808686][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1140.838706][T14814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1140.856791][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1140.880409][T14814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1140.895447][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1140.911409][T14814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1140.924245][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.071148][T14699] veth0_vlan: entered promiscuous mode [ 1141.161046][T14699] veth1_vlan: entered promiscuous mode [ 1141.194203][T14847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.268014][T14847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.299891][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.307283][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.329262][T14699] veth0_macvtap: entered promiscuous mode [ 1141.359754][T14814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.370598][T14699] veth1_macvtap: entered promiscuous mode [ 1141.388494][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.395697][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.463039][T14814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.488313][T14699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.527708][T14699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.540195][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.547392][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.598367][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.605604][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.625965][ T6237] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.661425][ T6237] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.676481][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.694389][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.020966][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.042876][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.114208][ T6237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.143738][ T6237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.232829][T15064] can0: slcan on ttyS3. [ 1143.669254][T15072] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1143.676727][T15072] overlayfs: failed to set xattr on upper [ 1143.683343][T15072] overlayfs: ...falling back to redirect_dir=nofollow. [ 1143.690277][T15072] overlayfs: ...falling back to index=off. [ 1143.696326][T15072] overlayfs: ...falling back to uuid=null. [ 1143.786738][T15073] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1144.331031][T15066] can0 (unregistered): slcan off ttyS3. [ 1148.080901][T14814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.282551][T14847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.043425][ T1216] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1152.222424][ T1216] usb 8-1: Using ep0 maxpacket: 16 [ 1152.234409][T14814] veth0_vlan: entered promiscuous mode [ 1152.254067][ T1216] usb 8-1: config 253 has an invalid interface number: 184 but max is 0 [ 1152.298849][ T1216] usb 8-1: config 253 has no interface number 0 [ 1152.310818][T14814] veth1_vlan: entered promiscuous mode [ 1152.327976][ T1216] usb 8-1: config 253 interface 184 has no altsetting 0 [ 1152.369306][ T1216] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1152.409220][ T1216] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.446037][ T1216] usb 8-1: Product: syz [ 1152.461370][ T1216] usb 8-1: Manufacturer: syz [ 1152.483282][ T1216] usb 8-1: SerialNumber: syz [ 1152.532472][T14814] veth0_macvtap: entered promiscuous mode [ 1152.540025][ T1216] go7007 8-1:253.184: probe with driver go7007 failed with error -12 [ 1152.605630][T14814] veth1_macvtap: entered promiscuous mode [ 1153.292531][T15138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.308711][T14847] veth0_vlan: entered promiscuous mode [ 1153.372719][T14814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.404965][T15138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.406335][T14847] veth1_vlan: entered promiscuous mode [ 1153.555851][T14814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.619028][ T5636] usb 8-1: USB disconnect, device number 3 [ 1154.417163][ T8010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.663045][ T8010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.549301][ T807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.609218][ T807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.977623][T14847] veth0_macvtap: entered promiscuous mode [ 1156.988004][T14847] veth1_macvtap: entered promiscuous mode [ 1157.006388][T14847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.085351][T14847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.191074][ T5636] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1157.214183][ T6593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.232460][ T6593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.294940][T15176] xt_HMARK: proto mask must be zero with L3 mode [ 1157.306490][ T6593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.438050][ T6593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.511182][ T5636] usb 8-1: Using ep0 maxpacket: 16 [ 1157.525272][ T5636] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.556551][ T5636] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1157.597010][ T5636] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1157.620878][ T5636] usb 8-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1157.656671][ T5636] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.699587][ T5636] usb 8-1: config 0 descriptor?? [ 1157.806149][ T6593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.076485][ T6593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.404132][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 1159.585885][T12750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.641857][T12750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.130011][ T807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.728771][ T3314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.468488][ T807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.469066][ T3314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.639689][ T5636] usbhid 8-1:0.0: can't add hid device: -71 [ 1161.672834][ T5636] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1161.695547][ T5636] usb 8-1: USB disconnect, device number 4 [ 1162.590113][ T30] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1163.687751][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 1165.391192][ T30] usb 1-1: device descriptor read/all, error -71 [ 1171.580906][T15273] can0: slcan on ttyS3. [ 1172.661477][T15273] can0 (unregistered): slcan off ttyS3. [ 1172.780397][T15276] loop4: detected capacity change from 0 to 1024 [ 1172.834121][T15276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1173.033161][T15283] loop7: detected capacity change from 0 to 128 [ 1173.060970][T15283] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1173.115202][T15283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1173.577270][ T30] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1173.658954][T15276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1173.780537][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 1173.793137][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.818975][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.848873][ T30] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1174.103070][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.464911][ T30] usb 9-1: config 0 descriptor?? [ 1175.819380][T15304] Cannot find add_set index 0 as target [ 1176.043777][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1913'. [ 1176.417718][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.424698][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.499901][T14814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.181673][ T30] usbhid 9-1:0.0: can't add hid device: -32 [ 1182.388537][ T30] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1183.026805][ T5756] usb 9-1: USB disconnect, device number 4 [ 1184.022575][T15351] loop4: detected capacity change from 0 to 64 [ 1185.883981][T15364] loop7: detected capacity change from 0 to 128 [ 1192.037894][T15398] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1192.340621][ T9940] Bluetooth: hci5: command 0x0405 tx timeout [ 1192.368332][ T5795] IPVS: starting estimator thread 0... [ 1192.740853][T15400] IPVS: using max 25 ests per chain, 60000 per kthread [ 1197.443132][T15420] loop7: detected capacity change from 0 to 2048 [ 1198.022449][T15420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.326541][T15424] loop5: detected capacity change from 0 to 2048 [ 1198.330193][T15420] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.248866][T15424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1199.289144][T15424] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.691260][ T8193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.526498][ T31] audit: type=1800 audit(2000000351.375:180): pid=15443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1946" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1201.307571][T14847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.825718][T15460] bridge1: entered promiscuous mode [ 1201.831176][T15460] bridge1: entered allmulticast mode [ 1202.427371][T15463] 9p: Bad value for 'rfdno' [ 1202.781848][T15464] loop5: detected capacity change from 0 to 32768 [ 1202.802918][T15464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1951 (15464) [ 1202.878533][T15464] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1202.889951][T15464] BTRFS info (device loop5): using sha256 checksum algorithm [ 1203.068064][T15464] BTRFS info (device loop5): enabling ssd optimizations [ 1203.075382][T15464] BTRFS info (device loop5): turning on async discard [ 1203.082245][T15464] BTRFS info (device loop5): enabling free space tree [ 1205.033298][T15491] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1206.687286][T14847] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1207.724453][T15513] input: syz1 as /devices/virtual/input/input11 [ 1207.898032][T15515] loop7: detected capacity change from 0 to 128 [ 1209.915492][ T31] audit: type=1800 audit(2000000360.486:181): pid=15522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1959" name="file1" dev="loop7" ino=1048751 res=0 errno=0 [ 1214.695077][T15552] loop4: detected capacity change from 0 to 128 [ 1215.036228][T15560] loop5: detected capacity change from 0 to 1024 [ 1216.432912][T15552] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1216.880620][T15552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1216.983425][T15552] System zones: 1-3, 19-19, 35-36 [ 1217.051139][T15552] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1217.177204][T15552] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.519236][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1217.841404][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 1217.889952][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1218.007068][ T30] usb 8-1: config 156 has an invalid interface number: 91 but max is 0 [ 1218.297356][ T30] usb 8-1: config 156 has no interface number 0 [ 1218.309714][ T30] usb 8-1: config 156 interface 91 has no altsetting 0 [ 1218.334523][ T30] usb 8-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=90.15 [ 1218.346136][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.355023][ T30] usb 8-1: Product: syz [ 1218.360951][ T30] usb 8-1: Manufacturer: syz [ 1218.364428][T14814] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1218.366398][ T30] usb 8-1: SerialNumber: syz [ 1218.381669][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1218.396721][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.479708][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1218.491256][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1218.546341][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1218.599467][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.261433][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1219.312199][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1219.328831][ T24] usb 9-1: Manufacturer: syz [ 1219.745441][T15592] program syz.4.1977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.538593][ T24] usb 9-1: config 0 descriptor?? [ 1221.127506][T15595] loop5: detected capacity change from 0 to 64 [ 1221.888454][ T24] usb 9-1: can't set config #0, error -71 [ 1221.942761][ T30] usb 8-1: can't set first interface for hiFace device. [ 1221.960431][ T24] usb 9-1: USB disconnect, device number 5 [ 1222.001926][ T30] snd-usb-hiface 8-1:156.91: probe with driver snd-usb-hiface failed with error -5 [ 1222.036510][T15597] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1222.109500][ T30] usb 8-1: USB disconnect, device number 5 [ 1225.484874][T15627] ubi0: attaching mtd0 [ 1225.505867][T15627] ubi0: scanning is finished [ 1227.309405][T15629] loop4: detected capacity change from 0 to 131072 [ 1227.345434][T15629] F2FS-fs (loop4): invalid crc value [ 1227.463967][T15629] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1227.487604][T15629] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1227.698066][T15627] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1228.514256][ T9940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1228.544466][ T9940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1228.564893][ T9940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1228.580609][ T9940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1228.594845][ T9940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1230.325897][ T9940] Bluetooth: hci3: command 0x0406 tx timeout [ 1230.688830][ T9940] Bluetooth: hci1: command tx timeout [ 1231.239454][T15650] loop5: detected capacity change from 0 to 512 [ 1231.270196][T15650] EXT4-fs: Ignoring removed oldalloc option [ 1231.537123][T15650] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 1232.768908][ T5646] Bluetooth: hci1: command tx timeout [ 1234.848637][ T5646] Bluetooth: hci1: command tx timeout [ 1236.941433][ T5646] Bluetooth: hci1: command tx timeout [ 1237.832959][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.997377][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.763134][T15639] lo speed is unknown, defaulting to 1000 [ 1240.963321][T15712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1240.972484][T15712] overlayfs: failed to set xattr on upper [ 1240.979060][T15712] overlayfs: ...falling back to redirect_dir=nofollow. [ 1240.985967][T15712] overlayfs: ...falling back to index=off. [ 1240.992928][T15712] overlayfs: ...falling back to uuid=null. [ 1241.070751][T15713] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1242.142546][T15711] loop5: detected capacity change from 0 to 7 [ 1242.242958][T15711] Dev loop5: unable to read RDB block 7 [ 1242.282207][T15070] bridge0: port 3(syz_tun) entered disabled state [ 1242.338127][T15711] loop5: AHDI p1 p2 p3 [ 1242.365553][T15711] loop5: partition table partially beyond EOD, truncated [ 1242.378755][T15711] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1242.404675][T15711] loop5: p3 start 335544320 is beyond EOD, truncated [ 1242.790495][T15070] syz_tun (unregistering): left allmulticast mode [ 1242.798336][ T5790] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1242.811290][T15070] syz_tun (unregistering): left promiscuous mode [ 1242.864216][T15070] bridge0: port 3(syz_tun) entered disabled state [ 1244.914172][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.001725][ T5790] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1245.046755][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.086112][ T5790] usb 5-1: Product: syz [ 1245.108247][ T5790] usb 5-1: Manufacturer: syz [ 1245.159117][ T5790] usb 5-1: SerialNumber: syz [ 1245.175466][ T5790] usb 5-1: config 0 descriptor?? [ 1245.217755][ T5790] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1245.333312][ T9940] Bluetooth: hci6: command 0x0406 tx timeout [ 1245.781863][ T5790] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1245.833203][ T5790] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1245.946607][ T5790] usb 5-1: USB disconnect, device number 2 [ 1247.103351][ T9940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1247.113111][ T9940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1247.124728][ T9940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1247.136544][ T9940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1247.146369][ T9940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1249.068495][T15639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.116031][T15639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.197447][T15639] bridge_slave_0: entered allmulticast mode [ 1249.256688][ T9940] Bluetooth: hci0: command tx timeout [ 1249.300497][T15765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1249.309660][T15765] UDF-fs: Scanning with blocksize 512 failed [ 1249.366181][T15639] bridge_slave_0: entered promiscuous mode [ 1249.438343][T15766] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1249.743553][T15639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.790015][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.821659][T15639] bridge_slave_1: entered allmulticast mode [ 1249.856813][T15639] bridge_slave_1: entered promiscuous mode [ 1249.871368][T15765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1250.030163][T15765] UDF-fs: Scanning with blocksize 1024 failed [ 1250.060782][T15765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1250.578108][T15765] UDF-fs: Scanning with blocksize 2048 failed [ 1250.596253][T15765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1250.868065][T15765] UDF-fs: Scanning with blocksize 4096 failed [ 1250.890495][T15639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.422097][ T9940] Bluetooth: hci0: command tx timeout [ 1251.587846][T15639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.140778][T15782] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1252.707838][T15639] team0: Port device team_slave_0 added [ 1252.878713][T15639] team0: Port device team_slave_1 added [ 1252.983499][T15639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.011536][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.264734][T15639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.488267][ T5646] Bluetooth: hci0: command tx timeout [ 1253.782807][T15639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.817254][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.633473][T15639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.855719][T15791] netlink: 'syz.0.2026': attribute type 3 has an invalid length. [ 1254.910678][T15791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2026'. [ 1254.944040][T15739] lo speed is unknown, defaulting to 1000 [ 1255.095010][T15639] hsr_slave_0: entered promiscuous mode [ 1255.196018][T15805] loop5: detected capacity change from 0 to 16 [ 1255.260069][ T5646] Bluetooth: hci5: command 0x0405 tx timeout [ 1255.278778][T15805] erofs (device loop5): mounted with root inode @ nid 36. [ 1255.568557][ T5646] Bluetooth: hci0: command tx timeout [ 1255.659343][ T5795] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1255.866650][T15639] hsr_slave_1: entered promiscuous mode [ 1255.897297][T15639] debugfs: 'hsr0' already exists in 'hsr' [ 1255.936363][T15639] Cannot create hsr debugfs directory [ 1256.273874][T15811] loop4: detected capacity change from 0 to 64 [ 1257.302261][ T5795] usb 1-1: device not accepting address 10, error -71 [ 1259.064709][T15821] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1259.122380][ T5756] IPVS: starting estimator thread 0... [ 1259.491245][T15824] IPVS: using max 25 ests per chain, 60000 per kthread [ 1260.642244][ T9940] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1260.652738][ T9940] CPU: 0 UID: 0 PID: 9940 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.652776][ T9940] Tainted: [L]=SOFTLOCKUP [ 1260.652785][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1260.652803][ T9940] Workqueue: hci3 hci_rx_work [ 1260.652847][ T9940] Call Trace: [ 1260.652858][ T9940] [ 1260.652868][ T9940] dump_stack_lvl+0xe8/0x150 [ 1260.652902][ T9940] sysfs_create_dir_ns+0x271/0x2a0 [ 1260.652947][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.652983][ T9940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1260.653020][ T9940] ? do_raw_spin_unlock+0xf5/0x210 [ 1260.653066][ T9940] kobject_add_internal+0x62b/0xd00 [ 1260.653104][ T9940] kobject_add+0x163/0x240 [ 1260.653144][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653177][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653212][ T9940] ? __pfx_kobject_add+0x10/0x10 [ 1260.653256][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653287][ T9940] ? _raw_spin_unlock+0x3f/0x50 [ 1260.653320][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653355][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653386][ T9940] ? get_device_parent+0x366/0x3a0 [ 1260.653423][ T9940] device_add+0x408/0xbb0 [ 1260.653459][ T9940] hci_conn_add_sysfs+0xd5/0x210 [ 1260.653503][ T9940] le_conn_complete_evt+0x10e6/0x16b0 [ 1260.653536][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653579][ T9940] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1260.653609][ T9940] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1260.653649][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653679][ T9940] ? __asan_memcpy+0x40/0x70 [ 1260.653725][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.653756][ T9940] ? skb_pull_data+0xfb/0x200 [ 1260.653806][ T9940] hci_le_conn_complete_evt+0x187/0x470 [ 1260.653846][ T9940] hci_event_packet+0x659/0xef0 [ 1260.653895][ T9940] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1260.653923][ T9940] ? __pfx_hci_event_packet+0x10/0x10 [ 1260.653987][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.654019][ T9940] ? hci_send_to_monitor+0xe2/0x590 [ 1260.654056][ T9940] hci_rx_work+0x3ee/0x1040 [ 1260.654098][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.654129][ T9940] ? preempt_schedule_thunk+0x16/0x30 [ 1260.654172][ T9940] ? process_scheduled_works+0xa70/0x1860 [ 1260.654204][ T9940] process_scheduled_works+0xb5d/0x1860 [ 1260.654232][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.654299][ T9940] ? __pfx_process_scheduled_works+0x10/0x10 [ 1260.654336][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.654367][ T9940] ? assign_work+0x3d5/0x5e0 [ 1260.654401][ T9940] worker_thread+0xa53/0xfc0 [ 1260.654430][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.654478][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.654520][ T9940] kthread+0x388/0x470 [ 1260.654555][ T9940] ? __pfx_worker_thread+0x10/0x10 [ 1260.654580][ T9940] ? __pfx_kthread+0x10/0x10 [ 1260.654616][ T9940] ret_from_fork+0x514/0xb70 [ 1260.654648][ T9940] ? __pfx_ret_from_fork+0x10/0x10 [ 1260.654675][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1260.654705][ T9940] ? __switch_to+0xc79/0x1410 [ 1260.654747][ T9940] ? __pfx_kthread+0x10/0x10 [ 1260.654783][ T9940] ret_from_fork_asm+0x1a/0x30 [ 1260.654850][ T9940] [ 1260.655735][ T9940] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1261.035498][ T9940] Bluetooth: hci3: failed to register connection device [ 1264.800581][T15846] loop5: detected capacity change from 0 to 64 [ 1264.815071][ T9940] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1264.825077][ T9940] CPU: 1 UID: 0 PID: 9940 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1264.825116][ T9940] Tainted: [L]=SOFTLOCKUP [ 1264.825126][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1264.825144][ T9940] Workqueue: hci6 hci_rx_work [ 1264.825196][ T9940] Call Trace: [ 1264.825207][ T9940] [ 1264.825219][ T9940] dump_stack_lvl+0xe8/0x150 [ 1264.825253][ T9940] sysfs_create_dir_ns+0x271/0x2a0 [ 1264.825288][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.825324][ T9940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1264.825362][ T9940] ? do_raw_spin_unlock+0xf5/0x210 [ 1264.825412][ T9940] kobject_add_internal+0x62b/0xd00 [ 1264.825451][ T9940] kobject_add+0x163/0x240 [ 1264.825495][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.825534][ T9940] ? __pfx_kobject_add+0x10/0x10 [ 1264.825577][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.825608][ T9940] ? _raw_spin_unlock+0x28/0x50 [ 1264.825640][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.825676][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.825706][ T9940] ? get_device_parent+0x366/0x3a0 [ 1264.825744][ T9940] device_add+0x408/0xbb0 [ 1264.825780][ T9940] hci_conn_add_sysfs+0xd5/0x210 [ 1264.825825][ T9940] le_conn_complete_evt+0x10e6/0x16b0 [ 1264.825857][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.825900][ T9940] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1264.825930][ T9940] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1264.825971][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826002][ T9940] ? __asan_memcpy+0x40/0x70 [ 1264.826041][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826072][ T9940] ? skb_pull_data+0xfb/0x200 [ 1264.826122][ T9940] hci_le_conn_complete_evt+0x187/0x470 [ 1264.826162][ T9940] hci_event_packet+0x659/0xef0 [ 1264.826220][ T9940] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1264.826249][ T9940] ? __pfx_hci_event_packet+0x10/0x10 [ 1264.826296][ T9940] ? kcov_remote_start+0x49a/0x7a0 [ 1264.826339][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826370][ T9940] ? hci_send_to_monitor+0xe2/0x590 [ 1264.826409][ T9940] hci_rx_work+0x3ee/0x1040 [ 1264.826452][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826489][ T9940] ? process_scheduled_works+0xa70/0x1860 [ 1264.826520][ T9940] process_scheduled_works+0xb5d/0x1860 [ 1264.826549][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826617][ T9940] ? __pfx_process_scheduled_works+0x10/0x10 [ 1264.826653][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826684][ T9940] ? assign_work+0x3d5/0x5e0 [ 1264.826718][ T9940] worker_thread+0xa53/0xfc0 [ 1264.826749][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826798][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.826841][ T9940] kthread+0x388/0x470 [ 1264.826878][ T9940] ? __pfx_worker_thread+0x10/0x10 [ 1264.826904][ T9940] ? __pfx_kthread+0x10/0x10 [ 1264.826942][ T9940] ret_from_fork+0x514/0xb70 [ 1264.826975][ T9940] ? __pfx_ret_from_fork+0x10/0x10 [ 1264.827003][ T9940] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1264.827034][ T9940] ? __switch_to+0xc79/0x1410 [ 1264.827078][ T9940] ? __pfx_kthread+0x10/0x10 [ 1264.827115][ T9940] ret_from_fork_asm+0x1a/0x30 [ 1264.827170][ T9940] [ 1265.285208][ T9940] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1265.300481][ T9940] Bluetooth: hci6: failed to register connection device [ 1267.601985][T15871] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 1268.458599][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1268.647915][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 1268.652571][T15876] loop5: detected capacity change from 0 to 512 [ 1268.690872][ T5866] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 1268.727957][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.768224][ T5866] usb 1-1: Product: syz [ 1268.861959][T15876] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2044: inode has both inline data and extents flags [ 1268.951468][T15876] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1268.951792][T15876] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2044: couldn't read orphan inode 15 (err -117) [ 1268.960981][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1268.961001][ C0] EXT4-fs (loop5): initial error at time 2000000419: ext4_orphan_get:1397: inode 15 [ 1268.961032][ C0] EXT4-fs (loop5): last error at time 2000000419: ext4_orphan_get:1397: inode 15 [ 1268.994019][ T5866] usb 1-1: Manufacturer: syz [ 1269.025865][T15876] loop5: lost filesystem error report for type 5 error -117 [ 1269.036371][ T5866] usb 1-1: SerialNumber: syz [ 1269.038135][T15876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.204346][ T5866] usb 1-1: cannot find UAC_HEADER [ 1271.521166][T15855] Falling back ldisc for ttyS3. [ 1272.336396][ T5866] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1272.494297][ T5866] usb 1-1: USB disconnect, device number 12 [ 1273.567065][T14906] udevd[14906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.679843][T14847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.280969][T15925] loop5: detected capacity change from 0 to 40427 [ 1275.467573][T15925] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1275.475428][T15925] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1275.518843][T15925] F2FS-fs (loop5): invalid crc value [ 1275.770834][T15925] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1275.785492][T15925] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1275.797988][T15925] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1276.008393][ T5756] libceph: connect (1)[c::]:6789 error -101 [ 1276.053599][ T31] audit: type=1800 audit(2000000427.043:182): pid=15925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2047" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1276.076055][ T5756] libceph: mon0 (1)[c::]:6789 connect error [ 1276.108407][T15933] Bluetooth: MGMT ver 1.23 [ 1276.119317][T15912] ceph: No mds server is up or the cluster is laggy [ 1278.185201][T15950] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1279.368608][ T5756] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1279.398312][ T1329] kworker/u8:8: attempt to access beyond end of device [ 1279.398312][ T1329] loop5: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 1279.426452][ T1329] kworker/u8:8: attempt to access beyond end of device [ 1279.426452][ T1329] loop5: rw=1, sector=49152, nr_sectors = 1464 limit=40427 [ 1279.464131][T15963] futex_wake_op: syz.4.2059 tries to shift op by 32; fix this program [ 1279.559151][ T5756] usb 1-1: Using ep0 maxpacket: 16 [ 1279.654109][T15966] loop4: detected capacity change from 0 to 128 [ 1280.511356][ T5756] usb 1-1: config 253 has an invalid interface number: 184 but max is 0 [ 1280.594959][ T5756] usb 1-1: config 253 has no interface number 0 [ 1280.652615][ T5756] usb 1-1: config 253 interface 184 has no altsetting 0 [ 1280.707828][ T5756] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1280.759502][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.811350][ T5756] usb 1-1: Product: syz [ 1280.836269][ T5756] usb 1-1: Manufacturer: syz [ 1280.858564][ T5756] usb 1-1: SerialNumber: syz [ 1280.960849][ T5756] go7007 1-1:253.184: probe with driver go7007 failed with error -12 [ 1281.123303][T15955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.188781][T15955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.239287][ T1216] usb 1-1: USB disconnect, device number 13 [ 1283.647124][ T5756] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1283.859600][ T5756] usb 9-1: Using ep0 maxpacket: 16 [ 1283.900196][ T5756] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 1283.919365][T15739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.945296][ T5756] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1283.969736][T15739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.971485][ T5756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.999959][T15739] bridge_slave_0: entered allmulticast mode [ 1284.071694][ T5756] usb 9-1: Product: syz [ 1284.113006][T15739] bridge_slave_0: entered promiscuous mode [ 1284.129105][T16011] loop4: detected capacity change from 0 to 64 [ 1284.176828][ T5756] usb 9-1: Manufacturer: syz [ 1284.341419][ T5756] usb 9-1: SerialNumber: syz [ 1284.477020][T15739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.596709][T15739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.671681][ T5756] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1284.673415][T15739] bridge_slave_1: entered allmulticast mode [ 1284.690962][ T5756] r8152-cfgselector 9-1: config 0 descriptor?? [ 1284.762458][T15739] bridge_slave_1: entered promiscuous mode [ 1284.941274][ T5756] r8152-cfgselector 9-1: Needed 1 retries to read version [ 1284.990728][ T5756] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1285.023117][ T5756] r8152-cfgselector 9-1: No union descriptors [ 1285.067169][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1285.092691][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1285.107603][ T5646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1285.120317][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1285.137001][ T5646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1285.414567][T16026] No such timeout policy "syz0" [ 1285.971591][ T5790] r8152-cfgselector 9-1: USB disconnect, device number 6 [ 1286.122193][T15739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.232649][T15739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.773617][T15739] team0: Port device team_slave_0 added [ 1286.878000][T15739] team0: Port device team_slave_1 added [ 1287.114298][T16040] loop4: detected capacity change from 0 to 512 [ 1287.332452][T16043] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1287.589393][ T5646] Bluetooth: hci4: command tx timeout [ 1287.907559][T16040] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1287.916974][T16040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1288.092150][T16044] loop5: detected capacity change from 0 to 64 [ 1288.417220][T16040] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2071: bad orphan inode 131083 [ 1288.427809][T16040] loop4: lost filesystem error report for type 5 error -117 [ 1288.447924][T16040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1289.185397][T14814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.251882][T15739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.282161][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.319313][T15739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.361248][T15739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.396662][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.496352][T15739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.647026][ T5646] Bluetooth: hci4: command tx timeout [ 1289.695631][T16071] loop4: detected capacity change from 0 to 24 [ 1289.753789][T16071] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1289.990771][T16071] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1291.245574][T16074] ------------[ cut here ]------------ [ 1291.252553][T16074] !buffer_uptodate(bh) [ 1291.252570][T16074] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#1: syz.5.2074/16074 [ 1291.268071][T16074] Modules linked in: [ 1291.276114][T16074] CPU: 1 UID: 0 PID: 16074 Comm: syz.5.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.289252][T16074] Tainted: [L]=SOFTLOCKUP [ 1291.293593][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1291.304581][T16074] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1291.310734][T16074] Code: 4c 89 f7 e8 89 5d da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 b4 63 fb ff e8 ff 21 6f ff eb 8c e8 f8 21 6f ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 ea 21 6f ff 90 0f 0b 90 e9 cf fd ff ff [ 1291.331228][T16074] RSP: 0018:ffffc9000398e3e8 EFLAGS: 00010293 [ 1291.337413][T16074] RAX: ffffffff82569d78 RBX: ffff88805126d000 RCX: ffff88802f005c40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1291.345398][T16074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1291.353767][T16074] RBP: ffff888051990001 R08: ffff88805126d007 R09: 1ffff1100a24da00 [ 1291.354432][T15739] hsr_slave_0: entered promiscuous mode [ 1291.369709][T16074] R10: dffffc0000000000 R11: ffffed100a24da01 R12: ffff8880abebec00 [ 1291.378395][T16074] R13: ffff8880512762b8 R14: ffff88805126d000 R15: 0000000000000012 [ 1291.386383][T16074] FS: 00007f1eaae096c0(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 1291.396743][T16074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1291.404357][T16074] CR2: 00007f1eaada5ff8 CR3: 000000005e996000 CR4: 0000000000350ef0 [ 1291.412666][T16074] Call Trace: [ 1291.413127][T15739] hsr_slave_1: entered promiscuous mode [ 1291.415943][T16074] [ 1291.415960][T16074] bfs_get_block+0x5da/0xae0 [ 1291.416013][T16074] __block_write_begin_int+0x6c6/0x1910 [ 1291.434798][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.440644][T16074] ? __pfx_bfs_get_block+0x10/0x10 [ 1291.445805][T16074] ? __pfx___block_write_begin_int+0x10/0x10 [ 1291.449751][T15739] debugfs: 'hsr0' already exists in 'hsr' [ 1291.451859][T16074] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 1291.465362][T16074] ? __pfx_bfs_get_block+0x10/0x10 [ 1291.468475][T15739] Cannot create hsr debugfs directory [ 1291.471400][T16074] block_write_begin+0x8d/0x120 [ 1291.483252][T16074] ? bfs_write_begin+0x1e/0xd0 [ 1291.489653][T16074] bfs_write_begin+0x35/0xd0 [ 1291.494365][T16074] generic_perform_write+0x2e2/0x8f0 [ 1291.499805][T16074] ? __pfx_generic_perform_write+0x10/0x10 [ 1291.505895][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.511820][T16074] ? file_update_time_flags+0x219/0x4a0 [ 1291.517488][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.523142][T16074] ? __generic_file_write_iter+0xf9/0x230 [ 1291.529056][T16074] ? generic_file_write_iter+0x136/0x680 [ 1291.534730][T16074] generic_file_write_iter+0x14a/0x680 [ 1291.540338][T16074] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1291.546414][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.552224][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.558835][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.564486][T16074] ? finish_task_switch+0x4da/0xbe0 [ 1291.571062][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.577848][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.584894][T16074] __kernel_write_iter+0x41e/0x880 [ 1291.590457][T16074] ? __pfx___kernel_write_iter+0x10/0x10 [ 1291.597486][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.603174][T16074] ? __asan_memset+0x22/0x50 [ 1291.609542][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.615253][T16074] ? iov_iter_kvec+0xb8/0x180 [ 1291.620243][T16074] __kernel_write+0x106/0x170 [ 1291.624967][T16074] ? cgroup1_freezing+0x20/0x350 [ 1291.630038][T16074] ? __pfx___kernel_write+0x10/0x10 [ 1291.635274][T16074] ? cgroup1_freezing+0x20/0x350 [ 1291.640999][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.646719][T16074] ? cgroup1_freezing+0x29a/0x350 [ 1291.651833][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.657675][T16074] ? freezing_slow_path+0x115/0x160 [ 1291.663789][T16074] dump_emit+0x8e9/0xab0 [ 1291.668808][T16074] ? __pfx_dump_emit+0x10/0x10 [ 1291.673612][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.680191][T16074] ? __kasan_kmalloc+0x93/0xb0 [ 1291.686192][T16074] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1291.692697][T16074] elf_core_dump+0x2e5d/0x3ad0 [ 1291.697900][T16074] ? __pfx_elf_core_dump+0x10/0x10 [ 1291.703037][T16074] ? __kasan_kmalloc+0x93/0xb0 [ 1291.707904][T16074] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 1291.713811][T16074] ? coredump_write+0x387/0x1910 [ 1291.718960][T16074] ? vfs_coredump+0x3807/0x4530 [ 1291.723842][T16074] ? get_signal+0x1107/0x1330 [ 1291.728667][T16074] ? arch_do_signal_or_restart+0xbc/0x830 [ 1291.734407][T16074] ? irqentry_exit+0x284/0x730 [ 1291.737024][ T5646] Bluetooth: hci4: command tx timeout [ 1291.739352][T16074] ? asm_exc_page_fault+0x26/0x30 [ 1291.749833][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.755574][T16074] ? mas_ascend+0x304/0x890 [ 1291.760343][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.767012][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.772677][T16074] coredump_write+0x1216/0x1910 [ 1291.778263][T16074] ? __pfx_coredump_write+0x10/0x10 [ 1291.783487][T16074] ? do_raw_spin_lock+0x12b/0x2f0 [ 1291.791503][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.798108][T16074] ? put_files_struct+0x256/0x350 [ 1291.803175][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.808884][T16074] ? do_raw_spin_unlock+0xf5/0x210 [ 1291.814269][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.820175][T16074] ? unshare_files+0xfc/0x140 [ 1291.824883][T16074] vfs_coredump+0x3807/0x4530 [ 1291.829862][T16074] ? __pfx_vfs_coredump+0x10/0x10 [ 1291.834920][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.840739][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.845697][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.851533][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.856501][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.862236][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.868174][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.873834][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.879567][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.887368][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.893385][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.899459][T16074] ? lock_acquire+0x106/0x350 [ 1291.904171][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.909943][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.915850][T16074] ? lock_acquire+0x106/0x350 [ 1291.920808][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.926462][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.932265][T16074] ? is_bpf_text_address+0x26/0x2b0 [ 1291.937562][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.943211][T16074] ? is_bpf_text_address+0x292/0x2b0 [ 1291.948578][T16074] ? is_bpf_text_address+0x26/0x2b0 [ 1291.953793][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.959549][T16074] ? kernel_text_address+0xa5/0xe0 [ 1291.964684][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.971343][T16074] ? __kernel_text_address+0xd/0x30 [ 1291.976571][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1291.983015][T16074] ? unwind_get_return_address+0x4d/0x90 [ 1291.990208][T16074] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1291.998117][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.003783][T16074] ? arch_stack_walk+0xfb/0x150 [ 1292.009276][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.015018][T16074] ? stack_trace_save+0xa9/0x100 [ 1292.020317][T16074] ? __pfx_stack_trace_save+0x10/0x10 [ 1292.025719][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.031681][T16074] ? stack_depot_save_flags+0x33/0x810 [ 1292.037278][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.042932][T16074] ? kasan_save_track+0x4f/0x80 [ 1292.047952][T16074] ? kasan_save_track+0x3e/0x80 [ 1292.052824][T16074] ? kasan_save_free_info+0x46/0x50 [ 1292.058143][T16074] ? __kasan_slab_free+0x5c/0x80 [ 1292.063101][T16074] ? kmem_cache_free+0x182/0x650 [ 1292.068149][T16074] ? get_signal+0xa4a/0x1330 [ 1292.073653][T16074] ? arch_do_signal_or_restart+0xbc/0x830 [ 1292.080101][T16074] ? irqentry_exit+0x284/0x730 [ 1292.085861][T16074] ? asm_exc_page_fault+0x26/0x30 [ 1292.092317][T16074] ? _raw_spin_unlock_irq+0x23/0x50 [ 1292.098556][T16074] get_signal+0x1107/0x1330 [ 1292.103204][T16074] arch_do_signal_or_restart+0xbc/0x830 [ 1292.109317][T16074] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1292.115561][T16074] irqentry_exit+0x284/0x730 [ 1292.120575][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.126229][T16074] ? trace_irq_disable+0x3b/0x140 [ 1292.131553][T16074] asm_exc_page_fault+0x26/0x30 [ 1292.137316][T16074] RIP: 0033:0x7f1ea9f9cde1 [ 1292.141742][T16074] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1292.161949][T16074] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 1292.168114][T16074] RAX: 0000000000000000 RBX: 00007f1eaa216090 RCX: 00007f1ea9f9cdd9 [ 1292.177062][T16074] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 1292.185481][T16074] RBP: 00007f1eaa032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1292.195636][T16074] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1292.205123][T16074] R13: 00007f1eaa216128 R14: 00007f1eaa216090 R15: 00007ffd3c50de38 [ 1292.214023][T16074] [ 1292.217153][T16074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1292.224443][T16074] CPU: 1 UID: 0 PID: 16074 Comm: syz.5.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1292.235405][T16074] Tainted: [L]=SOFTLOCKUP [ 1292.239833][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1292.249893][T16074] Call Trace: [ 1292.253354][T16074] [ 1292.256290][T16074] vpanic+0x56c/0xa60 [ 1292.260292][T16074] ? __pfx__printk+0x10/0x10 [ 1292.264898][T16074] ? __pfx_vpanic+0x10/0x10 [ 1292.269516][T16074] ? is_bpf_text_address+0x292/0x2b0 [ 1292.274864][T16074] ? is_bpf_text_address+0x26/0x2b0 [ 1292.280129][T16074] panic+0xc5/0xd0 [ 1292.283876][T16074] ? __pfx_panic+0x10/0x10 [ 1292.288333][T16074] __warn+0x315/0x4c0 [ 1292.292341][T16074] ? mark_buffer_dirty+0x299/0x410 [ 1292.298016][T16074] ? mark_buffer_dirty+0x299/0x410 [ 1292.303162][T16074] __report_bug+0x29a/0x540 [ 1292.307720][T16074] ? filemap_get_entry+0xcd/0x3f0 [ 1292.312882][T16074] ? filemap_get_entry+0xcd/0x3f0 [ 1292.318111][T16074] ? mark_buffer_dirty+0x299/0x410 [ 1292.323252][T16074] ? __pfx___report_bug+0x10/0x10 [ 1292.328333][T16074] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1292.334054][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.339703][T16074] ? mark_buffer_dirty+0x299/0x410 [ 1292.344829][T16074] report_bug+0x16a/0x220 [ 1292.349166][T16074] ? mark_buffer_dirty+0x299/0x410 [ 1292.354307][T16074] ? mark_buffer_dirty+0x29b/0x410 [ 1292.359430][T16074] handle_bug+0x9c/0x200 [ 1292.363690][T16074] exc_invalid_op+0x1a/0x50 [ 1292.368278][T16074] asm_exc_invalid_op+0x1a/0x20 [ 1292.373130][T16074] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1292.378997][T16074] Code: 4c 89 f7 e8 89 5d da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 b4 63 fb ff e8 ff 21 6f ff eb 8c e8 f8 21 6f ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 ea 21 6f ff 90 0f 0b 90 e9 cf fd ff ff [ 1292.398784][T16074] RSP: 0018:ffffc9000398e3e8 EFLAGS: 00010293 [ 1292.404856][T16074] RAX: ffffffff82569d78 RBX: ffff88805126d000 RCX: ffff88802f005c40 [ 1292.412819][T16074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1292.420986][T16074] RBP: ffff888051990001 R08: ffff88805126d007 R09: 1ffff1100a24da00 [ 1292.428985][T16074] R10: dffffc0000000000 R11: ffffed100a24da01 R12: ffff8880abebec00 [ 1292.436985][T16074] R13: ffff8880512762b8 R14: ffff88805126d000 R15: 0000000000000012 [ 1292.444965][T16074] ? mark_buffer_dirty+0x298/0x410 [ 1292.450109][T16074] ? mark_buffer_dirty+0x298/0x410 [ 1292.455493][T16074] bfs_get_block+0x5da/0xae0 [ 1292.460097][T16074] __block_write_begin_int+0x6c6/0x1910 [ 1292.465639][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.471285][T16074] ? __pfx_bfs_get_block+0x10/0x10 [ 1292.476401][T16074] ? __pfx___block_write_begin_int+0x10/0x10 [ 1292.482385][T16074] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 1292.488510][T16074] ? __pfx_bfs_get_block+0x10/0x10 [ 1292.493621][T16074] block_write_begin+0x8d/0x120 [ 1292.498484][T16074] ? bfs_write_begin+0x1e/0xd0 [ 1292.503344][T16074] bfs_write_begin+0x35/0xd0 [ 1292.508065][T16074] generic_perform_write+0x2e2/0x8f0 [ 1292.513406][T16074] ? __pfx_generic_perform_write+0x10/0x10 [ 1292.519225][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.524856][T16074] ? file_update_time_flags+0x219/0x4a0 [ 1292.530419][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.536074][T16074] ? __generic_file_write_iter+0xf9/0x230 [ 1292.541924][T16074] ? generic_file_write_iter+0x136/0x680 [ 1292.547630][T16074] generic_file_write_iter+0x14a/0x680 [ 1292.553106][T16074] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1292.559161][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.564808][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.570457][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.576215][T16074] ? finish_task_switch+0x4da/0xbe0 [ 1292.581425][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.587067][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.592037][T16074] __kernel_write_iter+0x41e/0x880 [ 1292.597178][T16074] ? __pfx___kernel_write_iter+0x10/0x10 [ 1292.602839][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.608487][T16074] ? __asan_memset+0x22/0x50 [ 1292.613081][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.618711][T16074] ? iov_iter_kvec+0xb8/0x180 [ 1292.623405][T16074] __kernel_write+0x106/0x170 [ 1292.628100][T16074] ? cgroup1_freezing+0x20/0x350 [ 1292.633050][T16074] ? __pfx___kernel_write+0x10/0x10 [ 1292.638270][T16074] ? cgroup1_freezing+0x20/0x350 [ 1292.643317][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.648952][T16074] ? cgroup1_freezing+0x29a/0x350 [ 1292.653986][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.659652][T16074] ? freezing_slow_path+0x115/0x160 [ 1292.664863][T16074] dump_emit+0x8e9/0xab0 [ 1292.669115][T16074] ? __pfx_dump_emit+0x10/0x10 [ 1292.673874][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.679507][T16074] ? __kasan_kmalloc+0x93/0xb0 [ 1292.684372][T16074] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1292.689939][T16074] elf_core_dump+0x2e5d/0x3ad0 [ 1292.694720][T16074] ? __pfx_elf_core_dump+0x10/0x10 [ 1292.699917][T16074] ? __kasan_kmalloc+0x93/0xb0 [ 1292.704782][T16074] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 1292.710361][T16074] ? coredump_write+0x387/0x1910 [ 1292.715426][T16074] ? vfs_coredump+0x3807/0x4530 [ 1292.720289][T16074] ? get_signal+0x1107/0x1330 [ 1292.724961][T16074] ? arch_do_signal_or_restart+0xbc/0x830 [ 1292.730865][T16074] ? irqentry_exit+0x284/0x730 [ 1292.735641][T16074] ? asm_exc_page_fault+0x26/0x30 [ 1292.740670][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.746394][T16074] ? mas_ascend+0x304/0x890 [ 1292.751209][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.756868][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.762520][T16074] coredump_write+0x1216/0x1910 [ 1292.767399][T16074] ? __pfx_coredump_write+0x10/0x10 [ 1292.772594][T16074] ? do_raw_spin_lock+0x12b/0x2f0 [ 1292.777643][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.783282][T16074] ? put_files_struct+0x256/0x350 [ 1292.788305][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.793943][T16074] ? do_raw_spin_unlock+0xf5/0x210 [ 1292.799066][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.804697][T16074] ? unshare_files+0xfc/0x140 [ 1292.809477][T16074] vfs_coredump+0x3807/0x4530 [ 1292.814282][T16074] ? __pfx_vfs_coredump+0x10/0x10 [ 1292.819323][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.824962][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.829940][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.835578][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.840530][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.846163][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.851108][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.856739][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.861678][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.867314][T16074] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.872469][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.878141][T16074] ? lock_acquire+0x106/0x350 [ 1292.882831][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.888472][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.894104][T16074] ? lock_acquire+0x106/0x350 [ 1292.898785][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.904428][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.910071][T16074] ? is_bpf_text_address+0x26/0x2b0 [ 1292.915279][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.920913][T16074] ? is_bpf_text_address+0x292/0x2b0 [ 1292.926205][T16074] ? is_bpf_text_address+0x26/0x2b0 [ 1292.931422][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.937075][T16074] ? kernel_text_address+0xa5/0xe0 [ 1292.942226][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.947869][T16074] ? __kernel_text_address+0xd/0x30 [ 1292.953101][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.958766][T16074] ? unwind_get_return_address+0x4d/0x90 [ 1292.964408][T16074] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1292.970582][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.976248][T16074] ? arch_stack_walk+0xfb/0x150 [ 1292.981188][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1292.986842][T16074] ? stack_trace_save+0xa9/0x100 [ 1292.991795][T16074] ? __pfx_stack_trace_save+0x10/0x10 [ 1292.997180][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.002828][T16074] ? stack_depot_save_flags+0x33/0x810 [ 1293.008300][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.013935][T16074] ? kasan_save_track+0x4f/0x80 [ 1293.018830][T16074] ? kasan_save_track+0x3e/0x80 [ 1293.023684][T16074] ? kasan_save_free_info+0x46/0x50 [ 1293.028880][T16074] ? __kasan_slab_free+0x5c/0x80 [ 1293.033828][T16074] ? kmem_cache_free+0x182/0x650 [ 1293.038775][T16074] ? get_signal+0xa4a/0x1330 [ 1293.043364][T16074] ? arch_do_signal_or_restart+0xbc/0x830 [ 1293.049089][T16074] ? irqentry_exit+0x284/0x730 [ 1293.053947][T16074] ? asm_exc_page_fault+0x26/0x30 [ 1293.059039][T16074] ? _raw_spin_unlock_irq+0x23/0x50 [ 1293.064244][T16074] get_signal+0x1107/0x1330 [ 1293.068765][T16074] arch_do_signal_or_restart+0xbc/0x830 [ 1293.074464][T16074] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1293.080694][T16074] irqentry_exit+0x284/0x730 [ 1293.085307][T16074] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.090956][T16074] ? trace_irq_disable+0x3b/0x140 [ 1293.096010][T16074] asm_exc_page_fault+0x26/0x30 [ 1293.100861][T16074] RIP: 0033:0x7f1ea9f9cde1 [ 1293.105286][T16074] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1293.124982][T16074] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 1293.131061][T16074] RAX: 0000000000000000 RBX: 00007f1eaa216090 RCX: 00007f1ea9f9cdd9 [ 1293.139031][T16074] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 1293.147001][T16074] RBP: 00007f1eaa032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1293.154977][T16074] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1293.162954][T16074] R13: 00007f1eaa216128 R14: 00007f1eaa216090 R15: 00007ffd3c50de38 [ 1293.170941][T16074] [ 1293.174368][T16074] Kernel Offset: disabled [ 1293.178681][T16074] Rebooting in 86400 seconds..