last executing test programs: 7m2.43776929s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setrlimit(0xe, &(0x7f00000001c0)={0x7, 0x100}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) 6m59.912517267s ago: executing program 0 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6m58.422361998s ago: executing program 0 (id=24): fsmount(0xffffffffffffffff, 0x1, 0x1) syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 6m54.867540201s ago: executing program 0 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 6m51.947623064s ago: executing program 0 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) 6m48.325230132s ago: executing program 0 (id=36): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 6m31.743898184s ago: executing program 32 (id=36): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 6m22.592492999s ago: executing program 3 (id=81): syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000032680)=""/194) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) 6m21.508560219s ago: executing program 3 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 6m19.60289564s ago: executing program 3 (id=89): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r1}, 0x10) close(r0) 6m16.292558576s ago: executing program 3 (id=95): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200002, &(0x7f0000000080)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {}, {@nogrpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x572, &(0x7f0000000380)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT042ZaurT8mCJuPosOBvs/QZqU0XUaTjrUOtj24F19kCCIOxD/Adx+H/4B/haCDIaPogy+Vm950MU3aLo02834+cLdzcm/zvSfnnpPvzU24AeTWWPpPIeLliPgyiTjasm44spVj69utPrk1nS5JrK19/HsSSfZYc/sk+/9wVnkpIn76POJ0YXPc2vLKfKlSKS9m9fH6wvXx2vLK2bmF0mx5tnxtcmrq/JtTk++8/Vbf2vr65T+/+ejh++e/OLn69Q+Pjt1P4mIcydZl7RjaZYg7rZWxGMtek5G42LbhxC4DDZpkuw06HAPsvaFsnI9EOgccjaFs1AP/f7cjYg3IqcT4h5xq5gHNc/vW8/k8ePze+gnQ5vYPr382Egca50aHVpN/nBml57ujfYifxvjxtwf30yXaPk9pd7sP8QCa7tyNiHPDw5vnvySb/3p3bgef+rXHyNv7D+ylh2n+c6ZT/lPYyH+iQ/5zuMPY7cX247/wqA9hukrzv3c75r8bU9foUFZ7oZHzjSRX5yrlcxHxYkScipH9V+cq+3uN35r/pUsav5kLZvvxaLjt2WdK9VKv8do9vhvxytP8N4lN8/+BRq7b3v/p63F5hzFOlB+82m1de/v3bflM/c+A176PeK1j/z+9opVsfX1yvHE8jDePis3+uHfi527xt+//f1fa/4e2bv9o0nq9tvbsMb478Fe527pej/99ySeNcvN4uVmq1xcnIvYlH25+fPLp3zbrze3T9p86ufX81+n4PxgRn+6w/feOd0+DBqH/Z56p/5+98MsHn33bLf7O+v+NRulU9shO5r+d7uBuXjsAAAAAAAAYNIWIOBJJobhRLhSKxfXvdxyPQ4VKtVY/fbW6dG0mGr+VHY2RQvNK99GW70NMZN+HbdYn2+pTEXEsIr4aOtioF6erlZm9bjwAAAAAAAAAAAAAAAAAAAAMiMNdfv+f+nW3d8MGBp9bfkN+bTv+N+7StPXteYDnj/d/yC/jH/LL+If8Mv4hv4x/yC/jH/LL+If8Mv4BAAAAAAAAAAAAAAAAAAAAAAAAAACgry5fupQua6tPbk2n9Zkby0vz1RtnZ8q1+eLC0nRxurp4vThbrc5WysXp6sJ2z1epVq9PTMbSzfF6uVYfry2vXFmoLl2rX5lbKM2Wr5RH/pNWAQAAAAAAAAAAAAAAAAAAwPOltrwyX6pUyosKXQsXYiB2o+dCsl0vX8gOhp5CDO99A/e2cGYwdqPfhT2emAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgxd8BAAD//5BCKYs=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) rename(&(0x7f0000003400)='./file0\x00', &(0x7f0000003440)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) sendfile(r1, r1, 0x0, 0x800000020) 6m10.247646304s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x200, 0x0, 0xfffffffffffffcdd, 0x0, 0x0, 0x0) 6m0.843638871s ago: executing program 3 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5m59.890456219s ago: executing program 33 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m30.722848607s ago: executing program 2 (id=576): clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000580)={{r0, r1/1000+10000}, {0x0, 0x2710}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1m27.078857948s ago: executing program 2 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 1m22.207012567s ago: executing program 2 (id=590): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x8001}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0x1, 0x100}, 0x20) 1m20.533599315s ago: executing program 2 (id=591): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000180), &(0x7f0000000080)=@tcp6, 0x1}, 0x20) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m15.972677483s ago: executing program 2 (id=599): r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsmount(r0, 0x0, 0x9) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) 1m14.064579012s ago: executing program 2 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r3, 0x0) 59.866830311s ago: executing program 4 (id=624): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 58.645103508s ago: executing program 34 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r3, 0x0) 55.646601044s ago: executing program 4 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 52.995476905s ago: executing program 4 (id=638): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 45.642689195s ago: executing program 4 (id=647): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x210840, &(0x7f0000001680)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c757466383d757466382c6572726f72733d636f6e74696e75652c00c0ec72da0e786da19f8afc9cab685c2f1b3be1370ef4e2ac9f32df7c6276b71904c62c69c4ccddbeeaa7f603fbed1185661060"], 0x3, 0x1516, &(0x7f0000002580)="$eJzs3AuYTlXbOPD7XmvtMSQ9SQ7DWuvePMlhmSTJIUkOSZIkSU4JoUleSUgMOSUNSUgOQ3IYQnKYmDTO5/MxJEmTJCE5Jet/TfF63w7f+/V9/V/X9879u659Wfde+1577X3v8ey9eeabLkNrNKpZtQERwf8K/vJHIgDEAsBAALgOAAIAKJu7bO7M/uwSE/93O2F/rUdSrvYM2NXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZ5ukFrucl6y78/j8r48///yAZpcZ+sbbUjV3/RArXP2vj+v/HCv47G3H9szauf9bG9c/auP5ZQbY/7OH6Z21cf8aysqv9/pmXq7tc7euPMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxljWcNZfoQDgcvtqz4sxxhhjjDHGGGN/HZ/tas+AMcYYY4wxxhhj//8hCJCgIIAYyAaxkB1ygACAayEXXAcRuB5yww2QB26EvJAP8kMBiIOCUAg0GLBAEEJhKAJRuAmKws1QDIpDCSgJDkpBPNwCpeFWKAO3QVm4HcrBHVAeKkBFqAR3QmW4C6rA3VAV7oFqUB1qQE24F2rBfVAb7oc68ADUhQehHjwE9eFhaACPQEN4FBrBY9AYHocm0BSaQXNo8T/KfxF6wEvQE3pBIvSGPvAy9IV+0B8GwEB4BQbBqzAYXoMkGAJD4XUYBm/AcHgTRsBIGAVvwWh4G8bAWBgH4yEZJsBEeAcmwbswGabAVJgGKTAdZsB7MBNmwWx4H+bABzAX5sF8WACp8CEshEWQBh/BYvgY0mEJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFu+ET2AN7YR98Cvvhsz+Zf+ZX+V0REFCgQIUKYzAGYzEWc2AOzIk5MRfmir18keTBPJgX82J+zI9xGIeFsBAaNEhIWBgLYxSjWBSLYjEshiWwBDp0GI/xWBpvxTJYBstiWSyH5bA8VsAKWAkrYWWsjFWwClbFqlgNq2ENrIH34r3YG2tjbayDdbAu1r38egobYANsiA2xETbCxtgYm2ATbIbNsAW2wJbYElthK2yDbbAttsX22B4TMAE7YAfsiB2xE3bCztgZu2AX7IrdsBu+mA3wJXwJe2E10Rv7YB/si0nZ+uMAHICv4CB8FV/F1zAJh+BQfB1fxzdwOJ7GETgSR+EorCzexjE4FkmMx2RMxok4ESfhJJyMU3AKTsMUnI4zcAbOxFk4C9/HOfgBfoDzcB4uwFRMxYW4CNMwDRfjGUzHJbgUl+FyXIHLcRWuxlW4FtfhWtyAG3ATbsItuAW34TbcgTtwFyoA/AT34l5Mwv24Hw/gATyIB/EQHsIMzMDDeBiP4BE8ikfxGB7D43gCT+IJPIWn8DSewbN4Fs/jebyAz8d91XBX8TVJIDIpoUSMiBGxIlbkEDlETpFT5BK5RERERG6RW+QReURekVfkF/lFnIgThUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQT8SJelBalRRlRRpQVt4ty4g5RXlQQrV0lUUlUFm1cFXG3qCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhI1Be9sT8+IjIr00gMwcZiKDYRTYW8dHG2FMOxlWgt2oinxEgcge1FS5cgnhEdxBjsKP4mxuJzorMYj13EC6Kr6Ca6ixdFD9HK9RS9xGTsLfqIadhX9BP9xQAxE6uL93FO9hriNZEkhoih4nWxAN8Qw8WbYoQYKUaJt8Ro8bYYI8aKcWK8SBYTxETxjpgk3hWTxRQxVUwTKWK6mCHeEzPFLDFbvC/miA/EXDFPzBcLRKr4UCwUi0Sa+EgsFh+LdLFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwV28R2sUPsFLvEbvGJ2CP2in3iU7FffCYOiM/FQfGFOCS+FBniK3FYfC2OiG/EUfGtOCa+E8fFCXFSfC9OiR/EaXFGnBXnxHnxo7ggfhIXhRcgUQoppZKBjJHZZKzMLnPIa2ROGVw6u9fL3PIGmUfeKPPKfDK/LCDjZEFZSGpppJUkQ1lYFpFReZMsKm+WxWRxWUKWlE6WkvHyFlla3irLyNtkWXm7LCfvkOVlBVlRVpJ3ysryLgmRX/ZRTVaXNWRNea+sJe+TteX9so58QNaVD8p68iFZXz4sG8hHZEP5qGwkH5ON5eOyiWwqm8nmsoV8QraUT8pWsrVsI5+SbWU72V4+LRPkM7KD9JcukedkZ/m87CJfkF1lN9ld/iQvSi97yl4SoLfsI1+WfWU/2V8OkAPlK3KQfFUOlq/JJDlEDpWvy2HyDQHyTTlCjpSj5FtytHxbjpFj5Tg5XibLCXKifEdOku/KyXKKnCqnyRQ5Xfa/NNJsKTPz5fD/Iv+d38kf/PPeN8nNcovcKrfJ7XKH3Cl3yd1yt9wj98h9cp/cL/fLA/KAPCgPykPykMyQGfKwPCyPyCPyqDwqj8lj8rg8Ic/J7+Up+YM8Lc/IM/KcPC/PywuXzgEoVEJJpVSgYlQ2FauyqxzqGpVTXatyqetURF2vcqsbVB51o8qr8qn8qoCKUwVVIaWVUVaRClVhVURF1U146YJRJVRJ5VQpFa9u+TP5qqi6WRVTxf8p//L8Ev9gfi1UC9VStVStVCvVRrVRbVVb1V61VwkqQXVQHVRH1VF1Up1UZ9VZdVFdVFfVVXVX3VUP1UP1VD1VokpUfdTLqq/qp/qrAWqgekUNUoPUYDVYJakkNVQNVcPUMDVcDVcj1Ag1So1So9VoNUaNUePUOJWsktVENVFNUpPUZDVZTVVTVYpKUTPUDDVTzVSz1Ww1R81Rc9VcNV/NV6kqVS1UC1WaSlOL1WKVrpaoJWqZWqZWqBVqlVql1qg1ap1apzaoDSpdbVab1Va1VW1X29VOtVPtVrvVHrVH7VP71H61Xx1QB9RBdVAdUodUhspQh9VhdUQdUUfVUXVMHVPH1XF1Up1Up9QpdVqdVmfVWXVenVcX1AV1UV3MvO0LRCACFaggJogJYoPYIEeQI8gZ5AxyBbmCSBAJcge5gzzBjUHeIF+QPygQxAUFg0KBDkxgA3Gp6NHgpqBocHNQLCgelAhKBi4oFcQHtwSlg1uDMsFtQdng9qBccEdQPqgQVAwqBXcGlYO7girB3UHV4J6gWlA9qBHUDO4NagX3BbWD+4M6wQNB3eDBoF7wUFA/eDhoEDwSNAweDRoFjwWNg8eDJkHToFnQPGjxl47v/el8T7qeupdO1L11H/2y7qv76f56gB6oX9GD9Kt6sH5NJ+kheqh+XQ/Tb+jh+k09Qo/Uo/RberR+W4/RY/U4PV4n6wl6on5HT9Lv6sl6ip6qp+kUPV3P0O/pmXqWnq3f13P0B3qunqfn6wU6VX+oF+pFOk1/pBfrj3W6XqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoXfqXXq3/kTv0Xv1Pv2p3q8/0wf05/qg/kIf0l/qDP2VPqy/1kf0N/qo/lYf09/p4/qEPqm/16f0D/q0PqPP6nP6vP5RX9A/6YvaZ97cZ368G2WUiTExJtbEmhwmh8lpcppcJpeJmIjJbXK3u1R+k9/kN3EmzhQyhUwmMmQKm8ImaqKmqClqiplipoQpYZxxJt7Em9KmtCljypiypqwpZ8qZ8qa8qWgqmjvNneYuc5e529xt7jH3mOqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWlv2psEk2A6mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJtEkmj6mj+lr+pr+pr8ZaAaaQWaQGWwGmySTZIaaoWaYGWaGm+FmhBlpRmUDQPO2GWPGmnFmvEk2yWaimWgmmUlmsplsppqpJsWkmBlmhplpZprZZraZY+aYuWaumW/mm1STahaahSbNpJnFZrFJN+lmqVlqlpvlZqVZaVab1WatWWvWw3qz0Ww0m81ms9VsNdvNdrPT7DS7zW6zx+wx+8w+s9/sNwfMAXPQHDSHzCGTYTLMYXPYHDFHzFFz1Bwzx8xxc9ycNCfNKXPKnDanzVlz1pw3+S59XnoTa7PbHPYam9Nea3PZ6+yv4/y2gI2zBW0hq21em+/neG/ML7Gx1hazxW0JW9I6W8rG21t+E5e3FWxFW8neaSvbu2yV38S17H22tr3f1rEP2Jr23n+K69oHbT37mK2PCGCb2oa2uW1kH7ON7eO2iW1qm9nmtq1tZ9vbp22CfcZ2sM/+Jl5oF9nVdo1da9fZPXavPWvP2SP2G3ve/mh72l52oH3FDrKv2sH2NZtkh/wmHmXfsqPt23aMHWvH2fG/iafaaTbFTrcz7Ht2pp31mzjVfmjn2DQ7186z8+2Cn+PMOaXZj+xi+7FNt0vsUrvMLrcr7Eq76u9zXWY32I12k91tP7Fb7Ta73e6wO+2un+PM49hnP7X77Wf2sP3aHrRf2EP2qM2wX/0cZx7fUfutPWa/s8ftCXvSfm9P2R/saXvm5+PPPPbv7U/2ovUWCAlIkqKAYigbxVJ2ykHXUE66lnLRdRSh6yk33UB56EbKS/koPxWgOCpIhUiTIUtEIRWmIhSlm+jyfXoJKkmOSlE83UKl6VYqQ7dRWbqdytEdVJ4qUEWqRHdSZbqLqtDdVJXuoWpUnWpQTbqXatF9VJvupzr0ANWlB6kePUT16WFqQI9QQ3qUGtFj1JgepybUlJpRc2pBT1BLepJaUWtqQ09RW2pH7elpSqBnqAM9Sx3pb9SJnqPO9Dx1oReoK3Wj7vQi9aCXqCf1okTqTX3oZepL/ag/DaCB9AoNoldpML1GSTSEhtLrNIzeoOH0Jo2gkTSK3qLR9DaNobE0jsZTMk2gifQOTaJ3aTJNoak0jVJoOs2g92gmzaLZ9D7NoQ9oLs2j+bSAUulDWkiLKI0+osX0MaXTElpKyyg11wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJu2g3fUJ7aC/to09pP31GB+hzOkhf0CH6kjLoKzpMX9MR+oaO0re+F31Hx+kEnaTv6RT9QKfpDJ2lc3SefqQL9BNdJE8QYihCGaowCGPCbGFsmD3MEV4T5gyvDXOF14WR8Powd3hDmCe8Mcwb5gvzhwXCuLBgWCjUoQltSGEYFg6LhNHwprBoeHNYLCwelghLhi4sFcaHt4Slw1vDMuFtYdnw9rBceEdYPqwQPvZApfDOsHJ4V1glvDusGt4TVgurhzXCmuG9Ya3wvrB2eH9YJ3wgLBM+GNYLHwrrhw+HDcJHwobho2Gj8LGwcfh42CRsGjYLm4ctwifCluGTYauwddgmfCpsG7YL24dPhwnhM2GH8Nmf+x9c9Mf9iWHvsE/4cvhy6P39cn50QTQ1+mF0YXRRNC36UXRx9ONoenRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U9T7mtnAoRNOOuUCF+OyuViX3eVw17ic7lqXy13nIu56l9vd4PK4G11el8/ldwVcnCvoCjntjLOOXOgKuyIu6m5yRd3Nrpgr7kq4ks65Ui7eNXctXAvX0j3pWrnWro17yj3l2rl27mn3tHvGdXDPuo7ub66Te851ds+7590Lrqvr5rq7F10PNyHXLz+Tia6P6+P6ur6uv+vvBrqBbpAb5Aa7wS7JJbmhbqgb5oa54W64G+FGuFFulBvtRrsxbowb58a5ZJfsJrqJbpKb5Ca7yW6qm+pSXIqb4Wa4mW6mqzzrl73MdXPdfDffpbpUt9Bl3jOmucVusUt36W6pW+qWu+VupVvpVrvVbq1b69a79W6j2+g2u81uq9vqtrvtbqfb6Xa73W6Pv+6XQd1+d8AdcAfdQXfIfeky3FfusPvaHXHfuKPuW3fMfeeOuxPupPvenXI/uNPujDvrzrnz7kd3wf3kLjrvkiMTIhMj70QmRd6NTI5MiUyNTIukRKZHZkTei8yMzIrMjrwfmRP5IDI3Mi8yP7Igkhr5MLIwsiiSFvkosjjycSQ9siSyNLIssjyyIuJ9wa2hL+yL+Ki/yRf1N/tivrgv4Ut650v5eH+LL+1v9WX8bb6sv92X83f48r6Cr+gf9018U9/MN/ct/BO+pX/St/KtfRv/lG/r2/n2/mmf4J/xHfyzvqP/m+/kn/Od/fO+i3/Bd/XdfHf/ou/hX/I9fS+f6Hv7Pv5l39f38/39AD/Qv+IH+Vf9YP+aT/JD/FD/uh/m3/DD/Zt+hB/pR8W85UdffkSG8T7ZT/AT/Tt+kn/XT/ZT/FQ/zaf46X6Gf8/P9LP8bP++n+M/8HP9PD/fL/Cp/kO/0C/yaf4jv9h/7NP9kssvlf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tr/L7/af+D1+r9/nP/X7/Wf+gP/cH/Rf+EP+S5/hv/KH/df+iP/GH/Xf+mP+O3/cn/An/ff+lP/Bn/Zn/Fl/zp/3P/oL/id/kb+zxhhjjDH23zLhSlP8Xn/v31kn/mHjPgBw7bYCGf/Yn3lHuT7vL+1+Iq5tBACe6dXlkctLtWqJiYmXtk2XEBSZB3D5X4IyxcCVeAm0gXaQAK2h9O/Ov5/odp7+xfjR2wFy/ENOLFyJr4z/+R+M/8RToxaWC8/m/i/GnwdQrMiVnOzw9/jv365oDWX+YPx8Lf/F/LN/kQzQ6h9ycsKV+Mr84+FJeBYS/mlLxhhjjDHGGGPsF/1ExU6Xnz8v/4/P33s+j1NXcjIfai/H/+r5nDHGGGOMMcYYY1ffc926P/1EQkLrTn++UeV/lMWNv7oh4K8Zx3uAy2sUAPy59AB+tQbg3342tvxb9pV06Ufn113Lz/nfnIT/w42r/BcTY4wxxhhj7C935ab/n9erqzUhxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/p3/Dqxq32MjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2/wIAAP//WyMKiA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) 36.96957824s ago: executing program 4 (id=661): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fallocate(r0, 0x8, 0x5000, 0x4000) 30.542306035s ago: executing program 4 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = memfd_create(&(0x7f0000000080)='y\x10\x01)\xbay\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bz', 0x2) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r3, 0x1f, 0x0, 0x1000000}) 22.522055717s ago: executing program 1 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000080ffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b500ffffff9000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000001940)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 20.226385603s ago: executing program 6 (id=696): read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x4, 0x9, 0x0, 0x0, 0xf590bbea2b5f2603}) 20.07830928s ago: executing program 1 (id=687): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000000)={0x28, 0xffffffffffffff80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000300), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x27, 0x5, 0x40000000000001ec, 0x0, r5}) 18.855224621s ago: executing program 7 (id=688): prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x10) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 17.104352773s ago: executing program 1 (id=689): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 16.877637358s ago: executing program 5 (id=690): fanotify_init(0x200, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x101400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 16.628406337s ago: executing program 7 (id=691): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) openat$vcsu(0xffffffffffffff9c, 0x0, 0x680140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xfffffffffffffffd) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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") 15.673702204s ago: executing program 1 (id=692): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) write(r2, &(0x7f0000000180)="ad2a67", 0x3) 14.304009856s ago: executing program 35 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = memfd_create(&(0x7f0000000080)='y\x10\x01)\xbay\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bz', 0x2) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r3, 0x1f, 0x0, 0x1000000}) 14.291598504s ago: executing program 5 (id=694): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f00000020c0)=0xffffffc3, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161101) r2 = dup(r1) connect$qrtr(0xffffffffffffffff, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2035) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x2000, 0x0) 14.286230516s ago: executing program 6 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x10\x01)\xbay\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bz', 0x2) fcntl$addseals(r3, 0x409, 0x7) 14.170606167s ago: executing program 7 (id=697): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x100) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x9ee, 0x7ac, 0x6, 0x8, 0x100, 0xfffffffffffffffd, 0x100fff}) mount$9p_virtio(0x0, 0x0, 0x0, 0x800000, 0x0) 12.748681259s ago: executing program 1 (id=698): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x200880, &(0x7f0000000200)=ANY=[@ANYBLOB='time_offset=0x30006,allow_utime=00000000000000000000000,utf8,utf8,errors=continue,errors=continue,errors=conuinue,\x00'], 0x3, 0x1509, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f00003b2000/0x1000)=nil, 0x1000, 0x1000003, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 12.527489857s ago: executing program 5 (id=699): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 12.073560693s ago: executing program 6 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 11.621603902s ago: executing program 7 (id=701): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xff, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 10.542274119s ago: executing program 6 (id=702): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='2\x00', 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) syz_usb_connect(0x2, 0x3f, 0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) 6.84383525s ago: executing program 8 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 6.84062365s ago: executing program 6 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000003800)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x20000, 0xfffffffb, 0x39, 0x747d5e13, 0x7fd, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0xfffffff8, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x203, 0x25, 0x4, 0xfffffffc, 0x8, 0x7fff, 0x72e, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8000, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0xa, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x100, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x805, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x7, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x0, 0x5, 0x80, 0x9, 0x8001, 0x2, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2003, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x8, 0x0, 0x7d, 0x401, 0x9], [0x108f, 0xffff, 0x3, 0x7, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x8000004, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x401, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0xfffff171, 0x6]}, 0x45c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) 6.814877362s ago: executing program 1 (id=714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x210840, &(0x7f0000001680)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c757466383d757466382c6572726f72733d636f6e74696e75652c00c0ec72da0e786da19f8afc9cab685c2f1b3be1370ef4e2ac9f32df7c6276b71904c62c69c4ccddbeeaa7f603fbed1185661060"], 0x3, 0x1516, &(0x7f0000002580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.804482481s ago: executing program 7 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) getresuid(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) 6.802297765s ago: executing program 5 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r3, &(0x7f0000000180)='q', 0x1, 0x100004) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r4, r3, 0x0, 0xd39a) 1.518207642s ago: executing program 8 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.518015149s ago: executing program 5 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r3, r5, 0x0, 0x10ffff) 1.391278384s ago: executing program 7 (id=705): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c"], 0xd8}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 20.102949ms ago: executing program 5 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 0s ago: executing program 6 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789", 0x42}], 0x1}, 0x8bb3a321ef809a) kernel console output (not intermixed with test programs): ld solve the problem. [ 96.176632][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.208344][ T5831] hsr_slave_0: entered promiscuous mode [ 96.215258][ T5831] hsr_slave_1: entered promiscuous mode [ 96.221610][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 96.227429][ T5831] Cannot create hsr debugfs directory [ 96.260825][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.267902][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.294251][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.322464][ T5839] hsr_slave_0: entered promiscuous mode [ 96.329184][ T5839] hsr_slave_1: entered promiscuous mode [ 96.335682][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 96.341413][ T5839] Cannot create hsr debugfs directory [ 96.397757][ T5832] hsr_slave_0: entered promiscuous mode [ 96.404347][ T5832] hsr_slave_1: entered promiscuous mode [ 96.411030][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 96.417042][ T5832] Cannot create hsr debugfs directory [ 96.617099][ T5837] hsr_slave_0: entered promiscuous mode [ 96.623675][ T5837] hsr_slave_1: entered promiscuous mode [ 96.630215][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 96.635971][ T5837] Cannot create hsr debugfs directory [ 96.835273][ T5840] Bluetooth: hci0: command tx timeout [ 96.835322][ T5843] Bluetooth: hci1: command tx timeout [ 96.915250][ T5843] Bluetooth: hci3: command tx timeout [ 96.915262][ T5840] Bluetooth: hci2: command tx timeout [ 96.925256][ T5840] Bluetooth: hci5: command tx timeout [ 96.926166][ T5835] Bluetooth: hci4: command tx timeout [ 97.298081][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.314362][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.326341][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.349437][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.426538][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.442730][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.465816][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.478103][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.575201][ T5832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.586252][ T5832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.597938][ T5832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.610560][ T5832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.759714][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.772469][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.784075][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.811839][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.841668][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.918484][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.926982][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.944833][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.967341][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.988177][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.999230][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.058822][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.066104][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.126908][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.134046][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.143574][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.154229][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.164780][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.191031][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.235700][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.287980][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.295146][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.310681][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.341971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.349099][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.400777][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.427232][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.434354][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.451723][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.458888][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.618236][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.719865][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.813411][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.856885][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.891778][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.915749][ T5835] Bluetooth: hci1: command tx timeout [ 98.921176][ T5835] Bluetooth: hci0: command tx timeout [ 98.928659][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.935851][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.979854][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.997095][ T5843] Bluetooth: hci3: command tx timeout [ 99.002572][ T5835] Bluetooth: hci4: command tx timeout [ 99.008099][ T5843] Bluetooth: hci5: command tx timeout [ 99.013500][ T5843] Bluetooth: hci2: command tx timeout [ 99.039566][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.055611][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.062769][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.160975][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.168204][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.221711][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.228899][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.261381][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.289370][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.350710][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.376822][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.384038][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.421617][ T5833] veth0_vlan: entered promiscuous mode [ 99.462264][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.528561][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.535871][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.596320][ T5833] veth1_vlan: entered promiscuous mode [ 99.713417][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.879976][ T5833] veth0_macvtap: entered promiscuous mode [ 99.929167][ T5833] veth1_macvtap: entered promiscuous mode [ 100.080356][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.161631][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.191575][ T5832] veth0_vlan: entered promiscuous mode [ 100.242739][ T5832] veth1_vlan: entered promiscuous mode [ 100.310680][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.365535][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.389911][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.410982][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.420883][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.479289][ T5832] veth0_macvtap: entered promiscuous mode [ 100.500315][ T5830] veth0_vlan: entered promiscuous mode [ 100.523204][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.554559][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.569020][ T5832] veth1_macvtap: entered promiscuous mode [ 100.606330][ T5830] veth1_vlan: entered promiscuous mode [ 100.644189][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.657254][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.668999][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.700027][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.738023][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.748127][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.785489][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.812062][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.822518][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.832416][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.900925][ T5837] veth0_vlan: entered promiscuous mode [ 100.931671][ T5830] veth0_macvtap: entered promiscuous mode [ 100.962070][ T5839] veth0_vlan: entered promiscuous mode [ 100.969781][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.994564][ T5837] veth1_vlan: entered promiscuous mode [ 101.000579][ T5843] Bluetooth: hci0: command tx timeout [ 101.006599][ T5843] Bluetooth: hci1: command tx timeout [ 101.018567][ T5830] veth1_macvtap: entered promiscuous mode [ 101.038046][ T5831] veth0_vlan: entered promiscuous mode [ 101.075301][ T5835] Bluetooth: hci2: command tx timeout [ 101.077064][ T5843] Bluetooth: hci4: command tx timeout [ 101.080769][ T5835] Bluetooth: hci5: command tx timeout [ 101.087110][ T5843] Bluetooth: hci3: command tx timeout [ 101.134364][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.158689][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.168231][ T5831] veth1_vlan: entered promiscuous mode [ 101.264345][ T5839] veth1_vlan: entered promiscuous mode [ 101.760645][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.787449][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.804736][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.822798][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.865515][ T5837] veth0_macvtap: entered promiscuous mode [ 101.922640][ T5837] veth1_macvtap: entered promiscuous mode [ 101.941234][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.978633][ T5831] veth0_macvtap: entered promiscuous mode [ 102.079126][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.104058][ T5839] veth0_macvtap: entered promiscuous mode [ 102.402723][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.412367][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.423690][ T5831] veth1_macvtap: entered promiscuous mode [ 103.417291][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.473124][ T5839] veth1_macvtap: entered promiscuous mode [ 103.574365][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.601981][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.628775][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.733161][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.978621][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.352681][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.365098][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.373994][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.409707][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.429989][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.521444][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.543834][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.590581][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.600804][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.671493][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.683609][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.685318][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.003213][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.216875][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.669610][ T94] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.727502][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.785094][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.838709][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.093319][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.205900][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.388492][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.397001][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.437692][ T6011] process 'syz.4.14' launched '/dev/fd/5' with NULL argv: empty string added [ 108.536639][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.544623][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.710820][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16'. [ 111.177305][ T6022] loop5: detected capacity change from 0 to 8 [ 111.289815][ T6026] kAFS: unable to lookup cell '(,c¾ûL' [ 111.307375][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.321141][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.357238][ T6028] loop4: detected capacity change from 0 to 256 [ 111.378106][ T6022] SQUASHFS error: lzo decompression failed, data probably corrupt [ 111.415258][ T6022] SQUASHFS error: Failed to read block 0x91: -5 [ 111.454365][ T6022] SQUASHFS error: Unable to read metadata cache entry [8f] [ 111.502999][ T6022] SQUASHFS error: Unable to read inode 0x11f [ 112.775752][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.672299][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 114.033100][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.147075][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.291755][ T5843] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 114.304420][ T5843] Bluetooth: hci3: Injecting HCI hardware error event [ 114.312641][ T5140] Bluetooth: hci3: hardware error 0x00 [ 114.390198][ T5912] usb 5-1: device descriptor read/all, error -71 [ 115.465608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.565989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.575589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.381735][ T5140] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 121.815070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.055174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.204894][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.222422][ T6149] Bluetooth: MGMT ver 1.23 [ 132.222787][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.190676][ T5842] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.545154][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 133.574093][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.629876][ T5842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.679210][ T5842] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.701141][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.763837][ T5842] usb 4-1: Product: syz [ 133.840641][ T5842] usb 4-1: Manufacturer: syz [ 133.853113][ T5842] usb 4-1: SerialNumber: syz [ 133.886294][ T5842] usb 4-1: config 0 descriptor?? [ 134.322235][ T6165] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.829984][ T6169] xt_socket: unknown flags 0x50 [ 135.771519][ T790] usb 4-1: USB disconnect, device number 2 [ 135.782017][ T6175] x_tables: ip_tables: osf match: only valid for protocol 6 [ 138.505515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 140.009810][ T6188] Zero length message leads to an empty skb [ 144.776861][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.834436][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.856710][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.208249][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.225477][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.190717][ T6239] loop4: detected capacity change from 0 to 16 [ 147.290089][ T6239] erofs (device loop4): mounted with root inode @ nid 36. [ 147.717718][ T6252] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 147.731925][ T6252] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 147.739952][ T6252] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 147.749407][ T6252] erofs (device loop4): read error -117 @ 0 of nid 89 [ 147.911984][ T30] audit: type=1800 audit(1775188817.026:2): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.71" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 147.966149][ T5140] Bluetooth: hci6: command tx timeout [ 150.056481][ T5140] Bluetooth: hci6: command tx timeout [ 150.294784][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 151.154476][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 152.235077][ T5140] Bluetooth: hci6: command tx timeout [ 152.796964][ T6247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.305086][ T5843] Bluetooth: hci6: command tx timeout [ 154.390284][ T6247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.552882][ T6340] loop3: detected capacity change from 0 to 1024 [ 157.882397][ T6247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.989407][ T6340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.199565][ T6247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.240438][ T6359] evm: overlay not supported [ 159.418543][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.453342][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.921347][ T6220] bridge_slave_0: entered allmulticast mode [ 159.949216][ T6220] bridge_slave_0: entered promiscuous mode [ 160.989813][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.015092][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.025388][ T6220] bridge_slave_1: entered allmulticast mode [ 161.038336][ T6220] bridge_slave_1: entered promiscuous mode [ 161.185891][ T30] audit: type=1800 audit(1775188830.446:3): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="file1" dev="overlay" ino=13 res=0 errno=0 [ 162.526075][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.541593][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.395944][ T6220] team0: Port device team_slave_0 added [ 164.440785][ T6220] team0: Port device team_slave_1 added [ 165.043956][ T6247] bridge_slave_1: left allmulticast mode [ 165.103979][ T6247] bridge_slave_1: left promiscuous mode [ 165.607867][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.704607][ T6247] bridge_slave_0: left allmulticast mode [ 165.722530][ T6247] bridge_slave_0: left promiscuous mode [ 165.733919][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.897249][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.962843][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.003902][ T6247] bond0 (unregistering): Released all slaves [ 169.269918][ T6431] loop1: detected capacity change from 0 to 32768 [ 169.292958][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.803361][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.848268][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.441415][ T6416] syz_tun: entered allmulticast mode [ 170.806835][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.830968][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.935042][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.046302][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.068151][ T6416] syz_tun: left allmulticast mode [ 172.448381][ T6220] hsr_slave_0: entered promiscuous mode [ 172.465516][ T6220] hsr_slave_1: entered promiscuous mode [ 172.472126][ T6220] debugfs: 'hsr0' already exists in 'hsr' [ 172.478427][ T6220] Cannot create hsr debugfs directory [ 173.018983][ T6247] hsr_slave_0: left promiscuous mode [ 173.037304][ T6247] hsr_slave_1: left promiscuous mode [ 173.052337][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.070453][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.527806][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.551754][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.568366][ T6247] veth1_macvtap: left promiscuous mode [ 175.595619][ T6247] veth0_macvtap: left promiscuous mode [ 175.721970][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.731207][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.741189][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.751289][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.759674][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.829356][ T6247] veth1_vlan: left promiscuous mode [ 175.834771][ T6247] veth0_vlan: left promiscuous mode [ 177.897647][ T5140] Bluetooth: hci4: command tx timeout [ 179.970650][ T5140] Bluetooth: hci4: command tx timeout [ 181.085973][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 181.792365][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 182.035078][ T5140] Bluetooth: hci4: command tx timeout [ 182.055386][ T6531] loop4: detected capacity change from 0 to 32768 [ 182.104395][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 182.151303][ T6531] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.280832][ T6531] XFS (loop4): Ending clean mount [ 182.296121][ T6531] XFS (loop4): Quotacheck needed: Please wait. [ 182.412964][ T6531] XFS (loop4): Quotacheck: Done. [ 183.621732][ T5830] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.115873][ T5140] Bluetooth: hci4: command tx timeout [ 184.135053][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.329624][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.440364][ T5913] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 184.451938][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.525395][ T5913] usb 2-1: config 0 descriptor?? [ 184.583068][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 185.006434][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 185.045356][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 185.075073][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 185.103398][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.198690][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.233257][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 186.060478][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 186.087937][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 186.099163][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 186.119236][ T5913] pwc: recv_control_msg error -32 req 02 val 2500 [ 186.222926][ T6478] chnl_net:caif_netlink_parms(): no params data found [ 186.515128][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 186.538056][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 186.549223][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 186.575215][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.590532][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.730064][ T5913] pwc: Registered as video103. [ 186.759450][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 186.850961][ T5913] usb 2-1: USB disconnect, device number 2 [ 187.542035][ T6220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.042971][ T6220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.412145][ T6220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.374234][ T6613] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.495389][ T6220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.520319][ T6621] loop4: detected capacity change from 0 to 1024 [ 191.580930][ T6621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.703976][ T6621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.718167][ T6247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.846673][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.853792][ T30] audit: type=1800 audit(1775188861.116:4): pid=6621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.157" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 191.887897][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.900391][ T6478] bridge_slave_0: entered allmulticast mode [ 191.913061][ T6478] bridge_slave_0: entered promiscuous mode [ 191.930072][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.939878][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.955958][ T6478] bridge_slave_1: entered allmulticast mode [ 191.966566][ T6478] bridge_slave_1: entered promiscuous mode [ 192.472397][ T6247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.822391][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.851827][ T6247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.108535][ T6642] syz.1.159 (6642) used greatest stack depth: 19576 bytes left [ 193.641406][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.889511][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.257426][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.301305][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.576212][ T6247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.664009][ T6656] loop1: detected capacity change from 0 to 16 [ 194.745531][ T6656] erofs (device loop1): mounted with root inode @ nid 36. [ 194.795906][ T5140] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 195.080358][ T6656] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 195.992257][ T6656] erofs (device loop1): read error -117 @ 1 of nid 89 [ 196.034110][ T6478] team0: Port device team_slave_0 added [ 196.075083][ T30] audit: type=1800 audit(1775188865.316:5): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.163" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 196.098324][ T6478] team0: Port device team_slave_1 added [ 196.178855][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 196.419543][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.460638][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.645884][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.694012][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.326086][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.340572][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.370089][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.211204][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.267095][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.274273][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.534482][ T6247] bridge_slave_1: left allmulticast mode [ 199.599516][ T6247] bridge_slave_1: left promiscuous mode [ 200.335164][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.442384][ T6247] bridge_slave_0: left allmulticast mode [ 200.460795][ T6247] bridge_slave_0: left promiscuous mode [ 200.479916][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.701689][ T6714] openvswitch: netlink: Duplicate or invalid key (type 0). [ 201.709620][ T6714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.718025][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.759900][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.769641][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.798771][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.809396][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.905967][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.026040][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.056608][ T6247] bond0 (unregistering): Released all slaves [ 205.346173][ T6478] hsr_slave_0: entered promiscuous mode [ 205.353092][ T6478] hsr_slave_1: entered promiscuous mode [ 205.434482][ T6478] debugfs: 'hsr0' already exists in 'hsr' [ 205.477646][ T6478] Cannot create hsr debugfs directory [ 206.584120][ T5140] Bluetooth: hci5: command tx timeout [ 206.973713][ T6751] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 207.517931][ T6247] hsr_slave_0: left promiscuous mode [ 207.532313][ T6247] hsr_slave_1: left promiscuous mode [ 207.548061][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.571803][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.591078][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.609495][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.683750][ T6247] veth1_macvtap: left promiscuous mode [ 207.689633][ T6247] veth0_macvtap: left promiscuous mode [ 207.697022][ T6247] veth1_vlan: left promiscuous mode [ 207.702501][ T6247] veth0_vlan: left promiscuous mode [ 208.595078][ T5140] Bluetooth: hci5: command tx timeout [ 208.654122][ T6768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.818083][ T6769] libceph: resolve '96.' (ret=-3): failed [ 210.338998][ T6788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 210.976883][ T5140] Bluetooth: hci5: command tx timeout [ 211.676703][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 211.698439][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 213.005666][ T5140] Bluetooth: hci5: command tx timeout [ 214.027559][ T6808] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 214.035815][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'. [ 214.646815][ T6808] bridge0: port 3(dummy0) entered blocking state [ 214.905602][ T6808] bridge0: port 3(dummy0) entered disabled state [ 214.912146][ T6808] dummy0: entered allmulticast mode [ 214.939894][ T6808] dummy0: entered promiscuous mode [ 214.949915][ T6808] bridge0: port 3(dummy0) entered blocking state [ 214.956675][ T6808] bridge0: port 3(dummy0) entered forwarding state [ 215.022306][ T6819] openvswitch: netlink: Duplicate or invalid key (type 0). [ 215.029953][ T6819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.236204][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 216.236257][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 216.242272][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 216.351356][ T6829] capability: warning: `syz.5.203' uses deprecated v2 capabilities in a way that may be insecure [ 217.502115][ T6838] Cannot find add_set index 0 as target [ 218.015672][ T6718] chnl_net:caif_netlink_parms(): no params data found [ 218.070757][ T6478] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 218.138231][ T6478] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.229598][ T6842] syz_tun: entered allmulticast mode [ 218.240506][ T6478] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 219.703378][ T6478] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 225.775912][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.783585][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.982501][ T6718] bridge_slave_0: entered allmulticast mode [ 226.993837][ T6718] bridge_slave_0: entered promiscuous mode [ 227.218310][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.309916][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.435407][ T6718] bridge_slave_1: entered allmulticast mode [ 227.486728][ T6718] bridge_slave_1: entered promiscuous mode [ 229.917532][ T6718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.008280][ T6718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.952753][ T6945] random: crng reseeded on system resumption [ 231.563494][ T6718] team0: Port device team_slave_0 added [ 231.594439][ T6718] team0: Port device team_slave_1 added [ 231.609373][ T6950] loop2: detected capacity change from 0 to 256 [ 231.626350][ T6950] vfat: Bad value for 'shortname' [ 231.889980][ T6247] bridge_slave_1: left allmulticast mode [ 231.921422][ T6247] bridge_slave_1: left promiscuous mode [ 231.942879][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.980409][ T6247] bridge_slave_0: left allmulticast mode [ 232.001807][ T6247] bridge_slave_0: left promiscuous mode [ 232.013052][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.083276][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 232.229580][ T6964] netlink: del zone limit has 8 unknown bytes [ 232.488868][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.532280][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.567259][ T6247] bond0 (unregistering): Released all slaves [ 232.606415][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.625757][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.652499][ T6718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.728608][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.790667][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.816900][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.903123][ T6718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.963598][ T6478] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.022923][ T6247] hsr_slave_0: left promiscuous mode [ 233.031815][ T6247] hsr_slave_1: left promiscuous mode [ 233.047322][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.065851][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.836301][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.846735][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.864779][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.886534][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.896221][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.985791][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 236.073188][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 236.434382][ T6718] hsr_slave_0: entered promiscuous mode [ 236.461995][ T6718] hsr_slave_1: entered promiscuous mode [ 236.496026][ T6718] debugfs: 'hsr0' already exists in 'hsr' [ 236.546126][ T6718] Cannot create hsr debugfs directory [ 237.901086][ T7019] loop1: detected capacity change from 0 to 1024 [ 237.917975][ T7019] ======================================================= [ 237.917975][ T7019] WARNING: The mand mount option has been deprecated and [ 237.917975][ T7019] and is ignored by this kernel. Remove the mand [ 237.917975][ T7019] option from the mount to silence this warning. [ 237.917975][ T7019] ======================================================= [ 237.975800][ T5835] Bluetooth: hci6: command tx timeout [ 238.002889][ T7019] EXT4-fs: Ignoring removed oldalloc option [ 238.042965][ T7019] EXT4-fs: Ignoring removed bh option [ 238.112572][ T7019] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 238.112572][ T7019] [ 240.035908][ T5835] Bluetooth: hci6: command tx timeout [ 241.742313][ T30] audit: type=1800 audit(1775188910.986:6): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.248" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 242.166610][ T5835] Bluetooth: hci6: command tx timeout [ 243.763605][ T6999] chnl_net:caif_netlink_parms(): no params data found [ 244.205347][ T5835] Bluetooth: hci6: command tx timeout [ 244.542385][ T10] IPVS: starting estimator thread 0... [ 244.668423][ T7068] IPVS: using max 23 ests per chain, 55200 per kthread [ 244.719126][ T7071] IPVS: nq: FWM 3 0x00000003 - no destination available [ 244.755235][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 246.830907][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.855386][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.872218][ T6999] bridge_slave_0: entered allmulticast mode [ 246.880817][ T6999] bridge_slave_0: entered promiscuous mode [ 247.640817][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.656621][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.667584][ T6999] bridge_slave_1: entered allmulticast mode [ 247.916908][ T6999] bridge_slave_1: entered promiscuous mode [ 249.207738][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f9cfc00: rx timeout, send abort [ 249.409166][ T6999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.717860][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f9cfc00: abort rx timeout. Force session deactivation [ 250.225057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 250.618544][ T6999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.003654][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f9cec00: rx timeout, send abort [ 251.512100][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f9cec00: abort rx timeout. Force session deactivation [ 251.633617][ T7119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.795901][ T6999] team0: Port device team_slave_0 added [ 252.939750][ T7128] loop1: detected capacity change from 0 to 764 [ 254.335535][ T7136] cifs: Unknown parameter 'c' [ 254.627747][ T6718] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 254.916773][ T6999] team0: Port device team_slave_1 added [ 255.109823][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.138077][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.473376][ T6718] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.493587][ T417] bridge_slave_1: left allmulticast mode [ 255.550588][ T417] bridge_slave_1: left promiscuous mode [ 255.584793][ T7145] syz.5.270 (7145): attempted to duplicate a private mapping with mremap. This is not supported. [ 255.615311][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.692896][ T417] bridge_slave_0: left allmulticast mode [ 255.709698][ T417] bridge_slave_0: left promiscuous mode [ 255.724891][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.131722][ T417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.148282][ T417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.175933][ T417] bond0 (unregistering): Released all slaves [ 257.203216][ T7168] mmap: syz.1.275 (7168) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.360898][ T7131] syzkaller0: entered promiscuous mode [ 257.367133][ T7131] syzkaller0: entered allmulticast mode [ 260.878632][ T7194] loop1: detected capacity change from 0 to 164 [ 260.960851][ T7194] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 261.937471][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.949638][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.958825][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.985565][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.995297][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.023740][ T5842] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 262.389182][ T5842] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 262.399854][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.408268][ T5842] usb 2-1: Product: syz [ 262.415977][ T5842] usb 2-1: Manufacturer: syz [ 262.420641][ T5842] usb 2-1: SerialNumber: syz [ 262.456639][ T5842] usb 2-1: config 0 descriptor?? [ 262.711703][ T5842] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 263.194793][ T6718] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.353191][ T417] hsr_slave_0: left promiscuous mode [ 263.414965][ T417] hsr_slave_1: left promiscuous mode [ 263.422861][ T417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.450998][ T417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.635600][ T7218] ip6t_REJECT: ECHOREPLY is not supported [ 264.116388][ T5843] Bluetooth: hci4: command tx timeout [ 264.625812][ T5842] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 264.667112][ T5842] usb 2-1: USB disconnect, device number 3 [ 265.122073][ T417] team0 (unregistering): Port device team_slave_1 removed [ 265.148829][ T417] team0 (unregistering): Port device team_slave_0 removed [ 265.652466][ T7195] syzkaller0: entered promiscuous mode [ 265.713486][ T7195] syzkaller0: entered allmulticast mode [ 265.795055][ T7206] netlink: 96 bytes leftover after parsing attributes in process `syz.5.282'. [ 265.876288][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.883296][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.061566][ T6999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.641069][ T5843] Bluetooth: hci4: command tx timeout [ 266.667301][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.674293][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.717721][ T6999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.685838][ T5843] Bluetooth: hci4: command tx timeout [ 269.959554][ T7250] loop4: detected capacity change from 0 to 40427 [ 270.034457][ T7250] F2FS-fs (loop4): invalid crc value [ 270.117013][ T6999] hsr_slave_0: entered promiscuous mode [ 270.150695][ T6999] hsr_slave_1: entered promiscuous mode [ 270.195368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 270.222192][ T6999] debugfs: 'hsr0' already exists in 'hsr' [ 270.251136][ T7250] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 270.318116][ T7250] F2FS-fs (loop4): Start checkpoint disabled! [ 270.326215][ T6999] Cannot create hsr debugfs directory [ 270.335654][ T7250] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 270.353099][ T7250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 270.775276][ T5843] Bluetooth: hci4: command tx timeout [ 271.474790][ T30] audit: type=1800 audit(1775188940.736:7): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 271.563742][ T7250] syz.4.294: attempt to access beyond end of device [ 271.563742][ T7250] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 271.582758][ T7250] syz.4.294: attempt to access beyond end of device [ 271.582758][ T7250] loop4: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 271.599595][ T7250] syz.4.294: attempt to access beyond end of device [ 271.599595][ T7250] loop4: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 271.615575][ T7250] syz.4.294: attempt to access beyond end of device [ 271.615575][ T7250] loop4: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 271.632676][ T7250] syz.4.294: attempt to access beyond end of device [ 271.632676][ T7250] loop4: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 271.649174][ T7250] syz.4.294: attempt to access beyond end of device [ 271.649174][ T7250] loop4: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 271.666202][ T7250] syz.4.294: attempt to access beyond end of device [ 271.666202][ T7250] loop4: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 271.688342][ T7250] syz.4.294: attempt to access beyond end of device [ 271.688342][ T7250] loop4: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 271.704875][ T7250] syz.4.294: attempt to access beyond end of device [ 271.704875][ T7250] loop4: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 271.721363][ T7250] syz.4.294: attempt to access beyond end of device [ 271.721363][ T7250] loop4: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 271.765067][ T30] audit: type=1800 audit(1775188941.016:8): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 272.223509][ T30] audit: type=1800 audit(1775188941.016:9): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 272.685081][ T1147] CPU: 0 UID: 0 PID: 1147 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.685137][ T1147] Tainted: [L]=SOFTLOCKUP [ 272.685149][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.685170][ T1147] Workqueue: writeback wb_workfn (flush-7:4) [ 272.685231][ T1147] Call Trace: [ 272.685242][ T1147] [ 272.685255][ T1147] dump_stack_lvl+0x100/0x190 [ 272.685315][ T1147] f2fs_handle_critical_error+0x5d7/0x970 [ 272.685364][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.685412][ T1147] ? f2fs_build_fault_attr+0x53/0x280 [ 272.685458][ T1147] f2fs_write_end_io+0xc3f/0xf30 [ 272.685522][ T1147] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 272.685571][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.685620][ T1147] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 272.685665][ T1147] bio_endio+0x7a3/0x910 [ 272.685710][ T1147] submit_bio_noacct+0x64c/0x2010 [ 272.685774][ T1147] f2fs_submit_write_bio+0x133/0x350 [ 272.685818][ T1147] __submit_merged_bio+0x331/0x7b0 [ 272.685868][ T1147] f2fs_submit_page_write+0x234b/0x2af0 [ 272.685931][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.685973][ T1147] ? f2fs_allocate_data_block+0x1577/0x3b30 [ 272.686022][ T1147] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 272.686087][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.686134][ T1147] ? __f2fs_is_valid_blkaddr+0x1b8/0x1340 [ 272.686192][ T1147] do_write_page+0x5e4/0xdf0 [ 272.686244][ T1147] f2fs_outplace_write_data+0x1b1/0x270 [ 272.686296][ T1147] ? __pfx_f2fs_outplace_write_data+0x10/0x10 [ 272.686344][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.686392][ T1147] ? f2fs_encrypt_one_page+0x111/0x8c0 [ 272.686459][ T1147] f2fs_do_write_data_page+0x1188/0x1ac0 [ 272.686536][ T1147] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 272.686606][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.686665][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.686712][ T1147] ? __lock_acquire+0x4a5/0x2630 [ 272.686776][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.686832][ T1147] f2fs_write_single_data_page+0x131b/0x1ad0 [ 272.686910][ T1147] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 272.686969][ T1147] ? filemap_get_folios_tag+0x454/0xb10 [ 272.687021][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.687068][ T1147] ? rcu_is_watching+0x12/0xc0 [ 272.687137][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.687192][ T1147] f2fs_write_cache_pages+0xdf6/0x2720 [ 272.687276][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.687326][ T1147] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 272.687497][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.687545][ T1147] ? find_held_lock+0x2b/0x80 [ 272.687592][ T1147] ? f2fs_write_meta_pages+0x45c/0x6e0 [ 272.687650][ T1147] ? f2fs_write_meta_pages+0x45c/0x6e0 [ 272.687708][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.687755][ T1147] ? rcu_is_watching+0x12/0xc0 [ 272.687805][ T1147] f2fs_write_data_pages+0x799/0x16d0 [ 272.687879][ T1147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 272.687942][ T1147] ? __lock_acquire+0x4a5/0x2630 [ 272.688010][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.688063][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.688111][ T1147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 272.688174][ T1147] do_writepages+0x278/0x600 [ 272.688240][ T1147] ? __pfx_do_writepages+0x10/0x10 [ 272.688304][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.688357][ T1147] __writeback_single_inode+0x164/0x13c0 [ 272.688409][ T1147] ? find_held_lock+0x2b/0x80 [ 272.688459][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.688515][ T1147] ? __pfx___writeback_single_inode+0x10/0x10 [ 272.688567][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.688614][ T1147] ? do_raw_spin_unlock+0x145/0x1e0 [ 272.688657][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.688710][ T1147] writeback_sb_inodes+0x766/0x1c70 [ 272.688783][ T1147] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 272.688834][ T1147] ? debug_object_activate+0x331/0x490 [ 272.688875][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.688981][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.689028][ T1147] ? rcu_is_watching+0x12/0xc0 [ 272.689071][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.689118][ T1147] ? queue_io+0x287/0x550 [ 272.689170][ T1147] wb_writeback+0x1c0/0xbe0 [ 272.689234][ T1147] ? __pfx_wb_writeback+0x10/0x10 [ 272.689297][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.689344][ T1147] ? mark_held_locks+0x40/0x70 [ 272.689404][ T1147] ? _raw_spin_unlock_irq+0x23/0x50 [ 272.689473][ T1147] wb_workfn+0x142/0xc00 [ 272.689533][ T1147] ? try_to_wake_up+0x160/0x1a80 [ 272.689587][ T1147] ? __pfx_wb_workfn+0x10/0x10 [ 272.689641][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.689693][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.689744][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.689784][ T1147] ? rcu_is_watching+0x12/0xc0 [ 272.689835][ T1147] process_one_work+0xa23/0x19a0 [ 272.689896][ T1147] ? __pfx_process_one_work+0x10/0x10 [ 272.689933][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.689996][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.690051][ T1147] worker_thread+0x5ef/0xe50 [ 272.690108][ T1147] ? kthread+0x13a/0x450 [ 272.690140][ T1147] ? __pfx_worker_thread+0x10/0x10 [ 272.690177][ T1147] kthread+0x370/0x450 [ 272.690209][ T1147] ? __pfx_kthread+0x10/0x10 [ 272.690246][ T1147] ret_from_fork+0x754/0xd80 [ 272.690286][ T1147] ? __pfx_ret_from_fork+0x10/0x10 [ 272.690325][ T1147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.690372][ T1147] ? __switch_to+0x7b4/0x1120 [ 272.690417][ T1147] ? __pfx_kthread+0x10/0x10 [ 272.690453][ T1147] ret_from_fork_asm+0x1a/0x30 [ 272.690533][ T1147] [ 273.255090][ T1147] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 276.525546][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 276.790436][ T7318] syzkaller0: entered promiscuous mode [ 276.796309][ T7318] syzkaller0: entered allmulticast mode [ 277.505258][ T7324] loop4: detected capacity change from 0 to 32768 [ 278.294028][ T7324] JBD2: Ignoring recovery information on journal [ 278.367659][ T7324] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 278.720776][ T30] audit: type=1800 audit(1775189203.966:10): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.309" name="/" dev="fuse" ino=1 res=0 errno=0 [ 278.824514][ T30] audit: type=1800 audit(1775189203.986:11): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.301" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 279.894263][ T5830] ocfs2: Unmounting device (7,4) on (node local) [ 280.035261][ T30] audit: type=1326 audit(1775189205.286:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 280.147952][ T30] audit: type=1326 audit(1775189205.336:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 280.222484][ T30] audit: type=1326 audit(1775189205.346:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 280.246110][ T30] audit: type=1326 audit(1775189205.346:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 280.268405][ T30] audit: type=1326 audit(1775189205.346:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 280.291980][ T30] audit: type=1326 audit(1775189205.346:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 280.321257][ T30] audit: type=1326 audit(1775189205.346:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 280.348626][ T30] audit: type=1326 audit(1775189205.346:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd446b9c819 code=0x7ffc0000 [ 288.416622][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.428095][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.395833][ T7207] bridge_slave_0: entered allmulticast mode [ 289.404093][ T7207] bridge_slave_0: entered promiscuous mode [ 291.246481][ T7404] IPv6: NLM_F_REPLACE set, but no existing node found! [ 291.624805][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.655215][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.911739][ T7207] bridge_slave_1: entered allmulticast mode [ 291.935283][ T7207] bridge_slave_1: entered promiscuous mode [ 291.936739][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 292.764327][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.331'. [ 292.973979][ T7421] erspan1: entered allmulticast mode [ 293.030638][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.331'. [ 293.073299][ T7415] vlan2: entered allmulticast mode [ 293.079254][ T7415] bridge1: entered allmulticast mode [ 293.091632][ T7416] bridge1: port 1(erspan0) entered blocking state [ 293.098539][ T7416] bridge1: port 1(erspan0) entered disabled state [ 293.338370][ T7416] erspan0: entered allmulticast mode [ 294.037719][ T7416] erspan0: entered promiscuous mode [ 294.044650][ T7416] bridge1: port 1(erspan0) entered blocking state [ 294.051416][ T7416] bridge1: port 1(erspan0) entered forwarding state [ 294.171455][ T6999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.271074][ T7434] syz.2.334 uses obsolete (PF_INET,SOCK_PACKET) [ 294.317278][ T7418] bond1: entered promiscuous mode [ 294.331627][ T7418] bond1: entered allmulticast mode [ 294.355994][ T7418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.393575][ T7422] bond1 (unregistering): Released all slaves [ 294.427180][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.450168][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.462240][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.470632][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.479844][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.521110][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.655993][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.877069][ T7207] team0: Port device team_slave_0 added [ 294.889723][ T7207] team0: Port device team_slave_1 added [ 295.140258][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.162379][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.662151][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.817649][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.843682][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.880779][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.907954][ T417] bridge_slave_1: left allmulticast mode [ 295.936283][ T417] bridge_slave_1: left promiscuous mode [ 295.959804][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.987265][ T417] bridge_slave_0: left allmulticast mode [ 296.017808][ T417] bridge_slave_0: left promiscuous mode [ 296.038534][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.666788][ T5835] Bluetooth: hci5: command tx timeout [ 297.868877][ T7479] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[7479] [ 299.000351][ T5835] Bluetooth: hci5: command tx timeout [ 299.131601][ T417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.277051][ T417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.310970][ T417] bond0 (unregistering): Released all slaves [ 301.079363][ T5835] Bluetooth: hci5: command tx timeout [ 301.239623][ T7500] netlink: 'syz.1.348': attribute type 21 has an invalid length. [ 301.287151][ T417] hsr_slave_0: left promiscuous mode [ 301.500549][ T417] hsr_slave_1: left promiscuous mode [ 301.576415][ T417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.607940][ T417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.033627][ T417] team0 (unregistering): Port device team_slave_1 removed [ 302.089513][ T417] team0 (unregistering): Port device team_slave_0 removed [ 303.077650][ T7500] netlink: 'syz.1.348': attribute type 6 has an invalid length. [ 303.110925][ T7500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.348'. [ 303.155167][ T5835] Bluetooth: hci5: command tx timeout [ 303.181429][ T7207] hsr_slave_0: entered promiscuous mode [ 303.201231][ T7207] hsr_slave_1: entered promiscuous mode [ 303.208742][ T7207] debugfs: 'hsr0' already exists in 'hsr' [ 303.214548][ T7207] Cannot create hsr debugfs directory [ 303.547933][ T7518] loop2: detected capacity change from 0 to 40427 [ 303.613557][ T7518] F2FS-fs (loop2): invalid crc value [ 303.622759][ T7520] loop1: detected capacity change from 0 to 512 [ 303.717888][ T7518] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 303.732424][ T7518] F2FS-fs (loop2): Start checkpoint disabled! [ 303.741626][ T7518] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 303.752352][ T7518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 304.144183][ T7520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.656149][ T7520] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.700947][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 304.700975][ T30] audit: type=1800 audit(1775189229.966:146): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.353" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 304.736599][ T7518] bio_check_eod: 189 callbacks suppressed [ 304.736629][ T7518] syz.2.353: attempt to access beyond end of device [ 304.736629][ T7518] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 304.760313][ T7518] syz.2.353: attempt to access beyond end of device [ 304.760313][ T7518] loop2: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 304.776914][ T7518] syz.2.353: attempt to access beyond end of device [ 304.776914][ T7518] loop2: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 304.793225][ T7518] syz.2.353: attempt to access beyond end of device [ 304.793225][ T7518] loop2: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 304.811265][ T7518] syz.2.353: attempt to access beyond end of device [ 304.811265][ T7518] loop2: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 304.827410][ T7518] syz.2.353: attempt to access beyond end of device [ 304.827410][ T7518] loop2: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 304.843964][ T7518] syz.2.353: attempt to access beyond end of device [ 304.843964][ T7518] loop2: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 304.860154][ T7518] syz.2.353: attempt to access beyond end of device [ 304.860154][ T7518] loop2: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 304.876960][ T7518] syz.2.353: attempt to access beyond end of device [ 304.876960][ T7518] loop2: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 304.893083][ T7518] syz.2.353: attempt to access beyond end of device [ 304.893083][ T7518] loop2: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 305.101665][ T30] audit: type=1800 audit(1775189230.316:147): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.353" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 305.123525][ T30] audit: type=1800 audit(1775189230.346:148): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.353" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 305.530441][ T7535] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.881755][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.629618][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.629681][ T12] Tainted: [L]=SOFTLOCKUP [ 307.629695][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.629728][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 307.629796][ T12] Call Trace: [ 307.629808][ T12] [ 307.629823][ T12] dump_stack_lvl+0x100/0x190 [ 307.629889][ T12] f2fs_handle_critical_error+0x5d7/0x970 [ 307.629941][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.629990][ T12] ? f2fs_build_fault_attr+0x53/0x280 [ 307.630040][ T12] f2fs_write_end_io+0xc3f/0xf30 [ 307.630097][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 307.630155][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.630215][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 307.630266][ T12] bio_endio+0x7a3/0x910 [ 307.630315][ T12] submit_bio_noacct+0x64c/0x2010 [ 307.630388][ T12] f2fs_submit_write_bio+0x133/0x350 [ 307.630437][ T12] __submit_merged_bio+0x331/0x7b0 [ 307.630497][ T12] f2fs_submit_page_write+0x234b/0x2af0 [ 307.630567][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.630615][ T12] ? f2fs_allocate_data_block+0x1577/0x3b30 [ 307.630666][ T12] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 307.630739][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.630787][ T12] ? __f2fs_is_valid_blkaddr+0x1b8/0x1340 [ 307.630846][ T12] do_write_page+0x5e4/0xdf0 [ 307.630900][ T12] f2fs_outplace_write_data+0x1b1/0x270 [ 307.630948][ T12] ? __pfx_f2fs_outplace_write_data+0x10/0x10 [ 307.630998][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.631046][ T12] ? f2fs_encrypt_one_page+0x111/0x8c0 [ 307.631104][ T12] ? __pfx_css_rstat_updated+0x10/0x10 [ 307.631173][ T12] f2fs_do_write_data_page+0x1188/0x1ac0 [ 307.631244][ T12] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 307.631315][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.631374][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.631443][ T12] ? __lock_acquire+0x4a5/0x2630 [ 307.631508][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.631565][ T12] f2fs_write_single_data_page+0x131b/0x1ad0 [ 307.631643][ T12] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 307.631705][ T12] ? filemap_get_folios_tag+0x454/0xb10 [ 307.631765][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.631812][ T12] ? rcu_is_watching+0x12/0xc0 [ 307.631880][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.631935][ T12] f2fs_write_cache_pages+0xdf6/0x2720 [ 307.632022][ T12] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 307.632081][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.632138][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.632187][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.632235][ T12] ? find_held_lock+0x2b/0x80 [ 307.632375][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.632423][ T12] ? find_held_lock+0x2b/0x80 [ 307.632471][ T12] ? f2fs_write_meta_pages+0x45c/0x6e0 [ 307.632529][ T12] ? f2fs_write_meta_pages+0x45c/0x6e0 [ 307.632589][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.632637][ T12] ? rcu_is_watching+0x12/0xc0 [ 307.632688][ T12] f2fs_write_data_pages+0x799/0x16d0 [ 307.632769][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 307.632827][ T12] ? __lock_acquire+0x4a5/0x2630 [ 307.632895][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.632948][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.632997][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 307.633062][ T12] do_writepages+0x278/0x600 [ 307.633132][ T12] ? __pfx_do_writepages+0x10/0x10 [ 307.633197][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.633253][ T12] __writeback_single_inode+0x164/0x13c0 [ 307.633306][ T12] ? find_held_lock+0x2b/0x80 [ 307.633358][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.633409][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 307.633463][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.633511][ T12] ? do_raw_spin_unlock+0x145/0x1e0 [ 307.633555][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.633609][ T12] writeback_sb_inodes+0x766/0x1c70 [ 307.633687][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 307.633748][ T12] ? do_raw_spin_lock+0x128/0x260 [ 307.633791][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.633901][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.633948][ T12] ? rcu_is_watching+0x12/0xc0 [ 307.633991][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.634039][ T12] ? queue_io+0x287/0x550 [ 307.634088][ T12] wb_writeback+0x1c0/0xbe0 [ 307.634137][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.634200][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 307.634266][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.634313][ T12] ? mark_held_locks+0x40/0x70 [ 307.634372][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.634439][ T12] wb_workfn+0x142/0xc00 [ 307.634495][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.634542][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.634610][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 307.634667][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.634733][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.634786][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.634834][ T12] ? rcu_is_watching+0x12/0xc0 [ 307.634891][ T12] process_one_work+0xa23/0x19a0 [ 307.634952][ T12] ? __pfx_process_one_work+0x10/0x10 [ 307.634990][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.635054][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.635109][ T12] worker_thread+0x5ef/0xe50 [ 307.635172][ T12] ? kthread+0x13a/0x450 [ 307.635203][ T12] ? __pfx_worker_thread+0x10/0x10 [ 307.635240][ T12] kthread+0x370/0x450 [ 307.635273][ T12] ? __pfx_kthread+0x10/0x10 [ 307.635310][ T12] ret_from_fork+0x754/0xd80 [ 307.635350][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 307.635390][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.635438][ T12] ? __switch_to+0x7b4/0x1120 [ 307.635485][ T12] ? __pfx_kthread+0x10/0x10 [ 307.635523][ T12] ret_from_fork_asm+0x1a/0x30 [ 307.635594][ T12] [ 307.790862][ T7555] nbd: must specify at least one socket [ 307.863157][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 309.227644][ T7437] chnl_net:caif_netlink_parms(): no params data found [ 311.579087][ T7587] warning: `syz.5.369' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 312.888563][ T7614] random: crng reseeded on system resumption [ 313.594749][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.606063][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.628182][ T7437] bridge_slave_0: entered allmulticast mode [ 313.639049][ T7437] bridge_slave_0: entered promiscuous mode [ 315.205685][ T7628] nbd: must specify at least one socket [ 315.240062][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.554956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 316.252509][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.315267][ T7437] bridge_slave_1: entered allmulticast mode [ 316.546833][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.553297][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.477679][ T7437] bridge_slave_1: entered promiscuous mode [ 318.053241][ T7207] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 318.124335][ T7207] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 318.220985][ T7437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.273515][ T7437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.725396][ T7659] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[7659] [ 319.255516][ T7207] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 319.974989][ T417] bridge_slave_1: left allmulticast mode [ 319.993827][ T417] bridge_slave_1: left promiscuous mode [ 320.055133][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.304075][ T417] bridge_slave_0: left allmulticast mode [ 320.335405][ T417] bridge_slave_0: left promiscuous mode [ 320.341330][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.731461][ T417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.785545][ T417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.810533][ T417] bond0 (unregistering): Released all slaves [ 321.022715][ T7678] loop4: detected capacity change from 0 to 8192 [ 321.072185][ T7678] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.090274][ T7207] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.238259][ T417] hsr_slave_0: left promiscuous mode [ 321.296434][ T417] hsr_slave_1: left promiscuous mode [ 321.308364][ T417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.354416][ T417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.421603][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.392'. [ 321.526604][ T7692] vivid-004: disconnect [ 322.308363][ T7686] vivid-004: reconnect [ 324.948000][ T417] team0 (unregistering): Port device team_slave_1 removed [ 325.026259][ T5140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.036392][ T417] team0 (unregistering): Port device team_slave_0 removed [ 325.038224][ T5140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 325.053228][ T5140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 325.066666][ T5140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.266908][ T5140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.919221][ T7723] loop2: detected capacity change from 0 to 256 [ 325.927317][ T7723] exfat: Deprecated parameter 'utf8' [ 325.932638][ T7723] exfat: Unexpected value for 'utf8' [ 326.136707][ T5835] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 326.929297][ T7207] kthread_run failed with err -4 [ 326.979252][ T7437] team0: Port device team_slave_0 added [ 327.008384][ T7437] team0: Port device team_slave_1 added [ 327.340844][ T5140] Bluetooth: hci7: command tx timeout [ 328.867414][ T7693] bridge1: port 1(veth3) entered blocking state [ 328.873856][ T7693] bridge1: port 1(veth3) entered disabled state [ 328.935237][ T7693] veth3: entered allmulticast mode [ 329.177175][ T7693] veth3: entered promiscuous mode [ 329.465045][ T5140] Bluetooth: hci7: command tx timeout [ 330.018569][ T7694] bridge1: port 2(veth0_to_bond) entered blocking state [ 330.078861][ T7694] bridge1: port 2(veth0_to_bond) entered disabled state [ 330.101035][ T7694] veth0_to_bond: entered allmulticast mode [ 331.143737][ T7694] veth0_to_bond: entered promiscuous mode [ 331.991962][ T7748] IPv6: NLM_F_REPLACE set, but no existing node found! [ 332.063917][ T5140] Bluetooth: hci7: command tx timeout [ 332.215807][ T7437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.222799][ T7437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.125046][ T7437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.235452][ T7437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.272375][ T7437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.526828][ T5140] Bluetooth: hci7: command tx timeout [ 335.005017][ T7437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.576978][ T7788] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[7788] [ 338.406571][ T7790] loop2: detected capacity change from 0 to 128 [ 338.515882][ T7790] vfat: Unknown parameter '18446744073709551615ÿÿÿ' [ 339.614769][ T7437] hsr_slave_0: entered promiscuous mode [ 339.690730][ T7437] hsr_slave_1: entered promiscuous mode [ 339.736435][ T7437] debugfs: 'hsr0' already exists in 'hsr' [ 339.742234][ T7437] Cannot create hsr debugfs directory [ 339.868886][ T7806] loop4: detected capacity change from 0 to 512 [ 339.954495][ T7806] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 340.055947][ T7806] loop4: detected capacity change from 0 to 512 [ 340.148772][ T7806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.591676][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.917942][ T7822] FAT-fs (nbd2): unable to read boot sector [ 348.495209][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 353.545010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 354.886152][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.893430][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.015368][ T7711] bridge_slave_0: entered allmulticast mode [ 355.040955][ T7711] bridge_slave_0: entered promiscuous mode [ 355.212417][ T7954] vivid-003: disconnect [ 355.561554][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.678328][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.786649][ T7711] bridge_slave_1: entered allmulticast mode [ 355.878413][ T7711] bridge_slave_1: entered promiscuous mode [ 356.021398][ T7948] vivid-003: reconnect [ 356.118226][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 356.337985][ T417] bridge_slave_1: left allmulticast mode [ 356.343742][ T417] bridge_slave_1: left promiscuous mode [ 357.207156][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.349638][ T417] bridge_slave_0: left allmulticast mode [ 357.369480][ T417] bridge_slave_0: left promiscuous mode [ 357.399910][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.491450][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.502985][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.513670][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.523715][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.532475][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.102751][ T5140] Bluetooth: hci4: command tx timeout [ 362.266023][ T417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.356932][ T30] audit: type=1326 audit(1775189287.616:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.5.445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd446b9c819 code=0x0 [ 363.201311][ T5140] Bluetooth: hci4: command tx timeout [ 363.287217][ T417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.326797][ T417] bond0 (unregistering): Released all slaves [ 365.137546][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.245395][ T5140] Bluetooth: hci4: command tx timeout [ 365.365201][ T417] hsr_slave_0: left promiscuous mode [ 365.387431][ T417] hsr_slave_1: left promiscuous mode [ 365.416572][ T417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.695619][ T417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.599602][ T5140] Bluetooth: hci4: command tx timeout [ 368.284337][ T417] team0 (unregistering): Port device team_slave_1 removed [ 368.312165][ T417] team0 (unregistering): Port device team_slave_0 removed [ 369.640407][ T8034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.838379][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.675005][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 370.988772][ T7711] team0: Port device team_slave_0 added [ 372.950288][ T7711] team0: Port device team_slave_1 added [ 372.970941][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 373.099311][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'. [ 373.134928][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'. [ 373.273426][ T8054] bridge1: port 1(veth0_to_bond) entered blocking state [ 373.342279][ T8054] bridge1: port 1(veth0_to_bond) entered disabled state [ 373.364425][ T8054] veth0_to_bond: entered allmulticast mode [ 373.374837][ T8054] veth0_to_bond: entered promiscuous mode [ 373.374989][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 373.411963][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.428991][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.465300][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.499906][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.528971][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.582173][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.614456][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 373.695415][ T5913] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 373.707783][ T5913] usb 5-1: config 0 has no interface number 0 [ 373.741872][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 373.770050][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.780850][ T5913] usb 5-1: Product: syz [ 373.789431][ T5913] usb 5-1: Manufacturer: syz [ 373.814390][ T5913] usb 5-1: SerialNumber: syz [ 373.834956][ T5913] usb 5-1: config 0 descriptor?? [ 373.850208][ T5913] hub 5-1:0.132: bad descriptor, ignoring hub [ 373.869035][ T5913] hub 5-1:0.132: probe with driver hub failed with error -5 [ 373.894601][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input6 [ 373.995136][ T7711] hsr_slave_0: entered promiscuous mode [ 374.002473][ T7711] hsr_slave_1: entered promiscuous mode [ 374.050444][ T7711] debugfs: 'hsr0' already exists in 'hsr' [ 374.074947][ T7711] Cannot create hsr debugfs directory [ 374.145088][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 374.205096][ T5842] usb 5-1: USB disconnect, device number 4 [ 374.354262][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.377656][ T5913] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 374.391539][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.408062][ T5913] usb 3-1: config 0 descriptor?? [ 374.446564][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 374.769347][ T7963] chnl_net:caif_netlink_parms(): no params data found [ 374.862433][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 374.871185][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 374.884610][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 374.892941][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 374.900929][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 374.920201][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 374.938314][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 374.953033][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 374.963085][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 374.977376][ T5913] pwc: recv_control_msg error -32 req 02 val 2500 [ 375.136784][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.144033][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.153453][ T7963] bridge_slave_0: entered allmulticast mode [ 375.162978][ T7963] bridge_slave_0: entered promiscuous mode [ 375.186975][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.198866][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 375.200792][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.208393][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 375.222094][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 375.223552][ T7963] bridge_slave_1: entered allmulticast mode [ 375.229628][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 375.242276][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 375.242514][ T7963] bridge_slave_1: entered promiscuous mode [ 375.269603][ T5913] pwc: Registered as video103. [ 375.280802][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 375.338375][ T5913] usb 3-1: USB disconnect, device number 2 [ 375.447947][ T417] bridge_slave_1: left allmulticast mode [ 375.453686][ T417] bridge_slave_1: left promiscuous mode [ 375.477858][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.499502][ T417] bridge_slave_0: left allmulticast mode [ 375.505554][ T417] bridge_slave_0: left promiscuous mode [ 375.511539][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.616816][ T417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.628224][ T417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.638659][ T417] bond0 (unregistering): Released all slaves [ 375.654281][ T7963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.673910][ T7963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.770084][ T417] hsr_slave_0: left promiscuous mode [ 375.783517][ T417] hsr_slave_1: left promiscuous mode [ 375.791224][ T417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.822931][ T417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.913468][ T8106] loop1: detected capacity change from 0 to 8192 [ 378.515959][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.522404][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.547123][ T8106] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.350117][ T417] team0 (unregistering): Port device team_slave_1 removed [ 380.405534][ T417] team0 (unregistering): Port device team_slave_0 removed [ 382.089843][ T7963] team0: Port device team_slave_0 added [ 382.112408][ T7963] team0: Port device team_slave_1 added [ 382.395617][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 382.477782][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.246501][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.273868][ T7963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.434582][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.445052][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 383.455911][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.467969][ T9] usb 5-1: config 0 descriptor?? [ 383.495094][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.495217][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 383.512876][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.633100][ T7963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.819440][ T7963] hsr_slave_0: entered promiscuous mode [ 383.827129][ T7963] hsr_slave_1: entered promiscuous mode [ 383.833956][ T7963] debugfs: 'hsr0' already exists in 'hsr' [ 383.840447][ T7963] Cannot create hsr debugfs directory [ 383.916241][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 383.940070][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 383.964596][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 383.980539][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 383.995040][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 384.020020][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 385.034392][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 385.256784][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 385.266117][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 385.273410][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 385.517390][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 386.282007][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 386.555012][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 386.592932][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 386.619470][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 386.642463][ T9] pwc: Registered as video103. [ 386.688935][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 387.285851][ T9] usb 5-1: USB disconnect, device number 5 [ 387.769898][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.615524][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.629631][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.647393][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.657717][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 390.287051][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 390.579261][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.588256][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.595734][ T8192] bridge_slave_0: entered allmulticast mode [ 390.603988][ T8192] bridge_slave_0: entered promiscuous mode [ 390.639993][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.655209][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.662515][ T8192] bridge_slave_1: entered allmulticast mode [ 390.674789][ T8192] bridge_slave_1: entered promiscuous mode [ 390.742269][ T1151] bridge_slave_1: left allmulticast mode [ 390.749189][ T1151] bridge_slave_1: left promiscuous mode [ 390.755410][ T5140] Bluetooth: hci5: command tx timeout [ 390.757138][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.772604][ T1151] bridge_slave_0: left allmulticast mode [ 390.778496][ T1151] bridge_slave_0: left promiscuous mode [ 390.784377][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.931562][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.944197][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.954359][ T1151] bond0 (unregistering): Released all slaves [ 390.972670][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.986364][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.009996][ T7963] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 391.039937][ T8192] team0: Port device team_slave_0 added [ 391.046933][ T7963] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 391.074335][ T8192] team0: Port device team_slave_1 added [ 391.095901][ T7963] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 391.110195][ T1151] hsr_slave_0: left promiscuous mode [ 391.116894][ T1151] hsr_slave_1: left promiscuous mode [ 391.123279][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.133198][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.264150][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 391.282564][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 391.436483][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.443666][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.473100][ T8192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.489908][ T7963] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 391.503061][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.517514][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.546505][ T8192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.640346][ T8192] hsr_slave_0: entered promiscuous mode [ 391.647503][ T8192] hsr_slave_1: entered promiscuous mode [ 391.654074][ T8192] debugfs: 'hsr0' already exists in 'hsr' [ 391.660609][ T8192] Cannot create hsr debugfs directory [ 391.968788][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.002306][ T7963] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.017222][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.024435][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.043636][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.050877][ T7895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.392475][ T8192] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.418230][ T8192] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.436690][ T8192] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.452640][ T8192] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.517549][ T7963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.622708][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.664275][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.694912][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.702095][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.737837][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.745053][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.847673][ T5140] Bluetooth: hci5: command tx timeout [ 393.218562][ T7963] veth0_vlan: entered promiscuous mode [ 393.254045][ T7963] veth1_vlan: entered promiscuous mode [ 393.290743][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.335978][ T7963] veth0_macvtap: entered promiscuous mode [ 393.348834][ T7963] veth1_macvtap: entered promiscuous mode [ 393.376120][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.392033][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.439137][ T7888] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.468297][ T7888] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.497816][ T7888] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.513074][ T7888] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.683610][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.702053][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.793177][ T7888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.816087][ T7888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.111992][ T5140] Bluetooth: hci5: command tx timeout [ 396.405086][ T8283] netlink: del zone limit has 8 unknown bytes [ 396.684557][ T8192] veth0_vlan: entered promiscuous mode [ 396.700847][ T8192] veth1_vlan: entered promiscuous mode [ 397.395882][ T5140] Bluetooth: hci5: command tx timeout [ 397.696974][ T8192] veth0_macvtap: entered promiscuous mode [ 397.750650][ T8192] veth1_macvtap: entered promiscuous mode [ 398.568498][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.580900][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.740235][ T7886] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.769470][ T8303] loop4: detected capacity change from 0 to 4096 [ 398.809331][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.868850][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.899537][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.460973][ T8325] ntfs3(loop4): ino=21, "file1" failed to extend initialized size to 8000c5d. [ 401.143282][ T7891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.890123][ T7891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.761038][ T7886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.803096][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 402.847987][ T7886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.212459][ T8373] libceph: resolve '96.' (ret=-3): failed [ 406.941103][ T8380] netlink: del zone limit has 8 unknown bytes [ 407.761897][ T8391] loop4: detected capacity change from 0 to 256 [ 407.768756][ T8384] syzkaller0: entered promiscuous mode [ 407.774257][ T8384] syzkaller0: entered allmulticast mode [ 407.986766][ T8391] FAT-fs (loop4): Directory bread(block 64) failed [ 407.993351][ T8391] FAT-fs (loop4): Directory bread(block 65) failed [ 408.075638][ T8391] FAT-fs (loop4): Directory bread(block 66) failed [ 408.151393][ T8391] FAT-fs (loop4): Directory bread(block 67) failed [ 408.418921][ T8391] FAT-fs (loop4): Directory bread(block 68) failed [ 408.695455][ T8391] FAT-fs (loop4): Directory bread(block 69) failed [ 408.927941][ T8391] FAT-fs (loop4): Directory bread(block 70) failed [ 408.934539][ T8391] FAT-fs (loop4): Directory bread(block 71) failed [ 410.065247][ T8391] FAT-fs (loop4): Directory bread(block 72) failed [ 410.325720][ T8391] FAT-fs (loop4): Directory bread(block 73) failed [ 412.539477][ T8439] overlayfs: failed to clone lowerpath [ 412.579731][ T8443] libceph: resolve '96.' (ret=-3): failed [ 416.292340][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.530'. [ 423.795842][ T8536] libceph: resolve '96.' (ret=-3): failed [ 424.775678][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805768e000: rx timeout, send abort [ 425.283968][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805768e000: abort rx timeout. Force session deactivation [ 426.561396][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805768f800: rx timeout, send abort [ 427.069732][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805768f800: abort rx timeout. Force session deactivation [ 428.341134][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880579b9400: rx timeout, send abort [ 428.849480][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880579b9400: abort rx timeout. Force session deactivation [ 429.258803][ T30] audit: type=1326 audit(1775189354.526:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.6.555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82df19c819 code=0x0 [ 437.861480][ T8613] syzkaller0: entered promiscuous mode [ 437.867278][ T8613] syzkaller0: entered allmulticast mode [ 439.617890][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.628230][ T8624] libceph: resolve '96.' (ret=-3): failed [ 439.636151][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.919632][ T8637] loop7: detected capacity change from 0 to 1024 [ 440.941527][ T8637] EXT4-fs: Ignoring removed oldalloc option [ 441.659766][ T8647] random: crng reseeded on system resumption [ 441.918645][ T8637] EXT4-fs: Ignoring removed bh option [ 442.594205][ T8637] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 442.594205][ T8637] [ 451.054495][ T8710] loop4: detected capacity change from 0 to 2048 [ 451.292032][ T8713] syzkaller0: entered promiscuous mode [ 451.315087][ T8713] syzkaller0: entered allmulticast mode [ 452.169454][ T8710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.750863][ T8723] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 456.787539][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.826002][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'. [ 456.905199][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'. [ 458.939829][ T8766] loop6: detected capacity change from 0 to 256 [ 459.023777][ T8769] cgroup: Unknown subsys name 'uid' [ 459.952430][ T8766] FAT-fs (loop6): Directory bread(block 64) failed [ 459.977906][ T8766] FAT-fs (loop6): Directory bread(block 65) failed [ 459.985869][ T8766] FAT-fs (loop6): Directory bread(block 66) failed [ 459.992743][ T8766] FAT-fs (loop6): Directory bread(block 67) failed [ 460.047152][ T8766] FAT-fs (loop6): Directory bread(block 68) failed [ 460.072951][ T8766] FAT-fs (loop6): Directory bread(block 69) failed [ 460.097629][ T8766] FAT-fs (loop6): Directory bread(block 70) failed [ 460.117182][ T8776] loop7: detected capacity change from 0 to 4096 [ 460.127512][ T8766] FAT-fs (loop6): Directory bread(block 71) failed [ 460.153936][ T8766] FAT-fs (loop6): Directory bread(block 72) failed [ 460.174653][ T8766] FAT-fs (loop6): Directory bread(block 73) failed [ 460.333597][ T8776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.316301][ T7963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.091032][ T8800] loop4: detected capacity change from 0 to 764 [ 469.080798][ T8843] loop1: detected capacity change from 0 to 32768 [ 469.725686][ T8843] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 469.940341][ T8843] XFS (loop1): Ending clean mount [ 469.949170][ T8843] XFS (loop1): Quotacheck needed: Please wait. [ 470.048805][ T8843] XFS (loop1): Quotacheck: Done. [ 471.005780][ T30] audit: type=1800 audit(1775189396.046:151): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.617" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 471.652867][ T5831] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 474.096378][ T8883] netlink: 'syz.7.623': attribute type 2 has an invalid length. [ 477.281818][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.292963][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.302393][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.314376][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.323701][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 479.407296][ T5835] Bluetooth: hci6: command tx timeout [ 480.182525][ T8934] loop4: detected capacity change from 0 to 40427 [ 481.162064][ T8934] F2FS-fs (loop4): invalid crc value [ 481.474983][ T5835] Bluetooth: hci6: command tx timeout [ 482.189813][ T8934] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 482.207029][ T8934] F2FS-fs (loop4): Start checkpoint disabled! [ 482.222134][ T8934] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 482.237345][ T8934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 483.554958][ T5835] Bluetooth: hci6: command tx timeout [ 483.726412][ T30] audit: type=1800 audit(1775189408.976:152): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.638" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 483.926050][ T8952] bio_check_eod: 189 callbacks suppressed [ 483.926088][ T8952] syz.4.638: attempt to access beyond end of device [ 483.926088][ T8952] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 483.953800][ T8952] syz.4.638: attempt to access beyond end of device [ 483.953800][ T8952] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 483.972656][ T8952] syz.4.638: attempt to access beyond end of device [ 483.972656][ T8952] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 483.992332][ T8952] syz.4.638: attempt to access beyond end of device [ 483.992332][ T8952] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.012215][ T8952] syz.4.638: attempt to access beyond end of device [ 484.012215][ T8952] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.032655][ T8952] syz.4.638: attempt to access beyond end of device [ 484.032655][ T8952] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 484.048694][ T8952] syz.4.638: attempt to access beyond end of device [ 484.048694][ T8952] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.064623][ T8952] syz.4.638: attempt to access beyond end of device [ 484.064623][ T8952] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 484.081827][ T8952] syz.4.638: attempt to access beyond end of device [ 484.081827][ T8952] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 484.099621][ T8952] syz.4.638: attempt to access beyond end of device [ 484.099621][ T8952] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 485.675062][ T5835] Bluetooth: hci6: command tx timeout [ 486.970477][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.644'. [ 487.030000][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.030045][ T6724] Tainted: [L]=SOFTLOCKUP [ 487.030055][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.030073][ T6724] Workqueue: writeback wb_workfn (flush-7:4) [ 487.030121][ T6724] Call Trace: [ 487.030130][ T6724] [ 487.030141][ T6724] dump_stack_lvl+0x100/0x190 [ 487.030187][ T6724] f2fs_handle_critical_error+0x5d7/0x970 [ 487.030223][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.030257][ T6724] ? f2fs_build_fault_attr+0x53/0x280 [ 487.030293][ T6724] f2fs_write_end_io+0xc3f/0xf30 [ 487.030332][ T6724] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 487.030374][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.030415][ T6724] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 487.030452][ T6724] bio_endio+0x7a3/0x910 [ 487.030487][ T6724] submit_bio_noacct+0x64c/0x2010 [ 487.030538][ T6724] f2fs_submit_write_bio+0x133/0x350 [ 487.030581][ T6724] __submit_merged_bio+0x331/0x7b0 [ 487.030635][ T6724] __submit_merged_write_cond+0x3fe/0x510 [ 487.030684][ T6724] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 487.030731][ T6724] ? __pfx___might_resched+0x10/0x10 [ 487.030762][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.030804][ T6724] f2fs_write_cache_pages+0x21c0/0x2720 [ 487.030868][ T6724] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 487.030910][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.030952][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.030987][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031021][ T6724] ? find_held_lock+0x2b/0x80 [ 487.031056][ T6724] ? nr_blockdev_pages+0xde/0x120 [ 487.031096][ T6724] ? nr_blockdev_pages+0xde/0x120 [ 487.031134][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031183][ T6724] ? si_meminfo+0x118/0x230 [ 487.031210][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031245][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031331][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031365][ T6724] ? rcu_is_watching+0x12/0xc0 [ 487.031402][ T6724] f2fs_write_data_pages+0x799/0x16d0 [ 487.031445][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031510][ T6724] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 487.031576][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031612][ T6724] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 487.031658][ T6724] do_writepages+0x278/0x600 [ 487.031708][ T6724] ? __pfx_do_writepages+0x10/0x10 [ 487.031754][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031794][ T6724] __writeback_single_inode+0x164/0x13c0 [ 487.031832][ T6724] ? find_held_lock+0x2b/0x80 [ 487.031869][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031906][ T6724] ? __pfx___writeback_single_inode+0x10/0x10 [ 487.031944][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.031978][ T6724] ? do_raw_spin_unlock+0x145/0x1e0 [ 487.032010][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032049][ T6724] writeback_sb_inodes+0x766/0x1c70 [ 487.032105][ T6724] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 487.032142][ T6724] ? do_raw_spin_lock+0x128/0x260 [ 487.032174][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032253][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032288][ T6724] ? rcu_is_watching+0x12/0xc0 [ 487.032319][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032354][ T6724] ? queue_io+0x287/0x550 [ 487.032389][ T6724] wb_writeback+0x1c0/0xbe0 [ 487.032436][ T6724] ? __pfx_wb_writeback+0x10/0x10 [ 487.032483][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032517][ T6724] ? mark_held_locks+0x40/0x70 [ 487.032565][ T6724] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.032615][ T6724] wb_workfn+0x142/0xc00 [ 487.032656][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032690][ T6724] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 487.032737][ T6724] ? __pfx_wb_workfn+0x10/0x10 [ 487.032778][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032816][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032854][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.032888][ T6724] ? rcu_is_watching+0x12/0xc0 [ 487.032926][ T6724] process_one_work+0xa23/0x19a0 [ 487.032971][ T6724] ? __pfx_process_one_work+0x10/0x10 [ 487.032999][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.033045][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.033085][ T6724] worker_thread+0x5ef/0xe50 [ 487.033129][ T6724] ? kthread+0x13a/0x450 [ 487.033151][ T6724] ? __pfx_worker_thread+0x10/0x10 [ 487.033178][ T6724] kthread+0x370/0x450 [ 487.033202][ T6724] ? __pfx_kthread+0x10/0x10 [ 487.033230][ T6724] ret_from_fork+0x754/0xd80 [ 487.033259][ T6724] ? __pfx_ret_from_fork+0x10/0x10 [ 487.033289][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.033323][ T6724] ? __switch_to+0x7b4/0x1120 [ 487.033357][ T6724] ? __pfx_kthread+0x10/0x10 [ 487.033385][ T6724] ret_from_fork_asm+0x1a/0x30 [ 487.033437][ T6724] [ 487.033448][ T6724] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 488.320013][ T8972] bridge1: port 1(erspan0) entered blocking state [ 488.342986][ T8972] bridge1: port 1(erspan0) entered disabled state [ 488.363368][ T8972] erspan0: entered allmulticast mode [ 488.389607][ T8972] erspan0: entered promiscuous mode [ 488.440841][ T8972] bridge1: port 1(erspan0) entered blocking state [ 488.447520][ T8972] bridge1: port 1(erspan0) entered forwarding state [ 488.523063][ T8908] chnl_net:caif_netlink_parms(): no params data found [ 491.049263][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.090939][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.116887][ T8908] bridge_slave_0: entered allmulticast mode [ 491.136899][ T9002] loop4: detected capacity change from 0 to 256 [ 491.146043][ T8908] bridge_slave_0: entered promiscuous mode [ 491.164647][ T9002] exfat: Deprecated parameter 'utf8' [ 491.196888][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.235113][ T9002] exfat: Unexpected value for 'utf8' [ 491.240639][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.288182][ T8908] bridge_slave_1: entered allmulticast mode [ 491.339993][ T8908] bridge_slave_1: entered promiscuous mode [ 491.932978][ T9011] loop7: detected capacity change from 0 to 32768 [ 491.976978][ T9011] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 492.745576][ T9011] XFS (loop7): Ending clean mount [ 492.758811][ T9011] XFS (loop7): Quotacheck needed: Please wait. [ 492.839678][ T8908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.959913][ T9011] XFS (loop7): Quotacheck: Done. [ 492.977809][ T8908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.393372][ T30] audit: type=1800 audit(1775189418.626:153): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.654" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4429 res=0 errno=0 [ 493.829097][ T8908] team0: Port device team_slave_0 added [ 493.849845][ T8908] team0: Port device team_slave_1 added [ 493.937304][ T7963] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 495.134395][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.206410][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.346079][ T8908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.757509][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.813854][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.144911][ T8908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.730219][ T9053] loop4: detected capacity change from 0 to 40427 [ 496.741692][ T9053] F2FS-fs (loop4): invalid crc value [ 496.891328][ T9053] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 496.907051][ T9053] F2FS-fs (loop4): Start checkpoint disabled! [ 497.969332][ T9047] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 498.549610][ T9053] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 498.735121][ T9053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 499.839032][ T8908] hsr_slave_0: entered promiscuous mode [ 499.846059][ T8908] hsr_slave_1: entered promiscuous mode [ 499.852508][ T8908] debugfs: 'hsr0' already exists in 'hsr' [ 499.858340][ T8908] Cannot create hsr debugfs directory [ 501.065636][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.072192][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.930289][ T9118] fuse: Bad value for 'fd' [ 508.415245][ T9129] loop6: detected capacity change from 0 to 32768 [ 508.820079][ T9124] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 508.872494][ T9129] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 508.933252][ T8908] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 509.046569][ T9129] XFS (loop6): Ending clean mount [ 509.059206][ T9129] XFS (loop6): Quotacheck needed: Please wait. [ 510.145308][ T9129] XFS (loop6): Quotacheck: Done. [ 510.408283][ T8908] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 510.554439][ T30] audit: type=1800 audit(1775189435.786:154): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.676" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 511.046013][ T8192] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 511.143532][ T8908] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 512.242070][ T30] audit: type=1800 audit(1775189437.506:155): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.681" name="bus" dev="ramfs" ino=21677 res=0 errno=0 [ 512.373807][ T8908] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 513.163749][ T5140] Bluetooth: hci5: command 0x0406 tx timeout [ 515.566470][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.7.688'. [ 515.598835][ T8908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.842262][ T8908] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.154332][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.161648][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.242924][ T9203] hugetlbfs: syz.1.689 (9203): Using mlock ulimits for SHM_HUGETLB is obsolete [ 517.056485][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.063823][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.432352][ T9212] loop7: detected capacity change from 0 to 256 [ 518.180066][ T9212] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 518.454704][ T8908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 518.910507][ T8908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.694667][ T9231] loop1: detected capacity change from 0 to 256 [ 521.080383][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.091394][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.957414][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.976758][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.984419][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.257511][ T9252] mkiss: ax0: crc mode is auto. [ 523.288917][ T8908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.698327][ T9236] chnl_net:caif_netlink_parms(): no params data found [ 523.868934][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.876557][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.885224][ T9236] bridge_slave_0: entered allmulticast mode [ 523.895173][ T9236] bridge_slave_0: entered promiscuous mode [ 523.908214][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.915528][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.922725][ T9236] bridge_slave_1: entered allmulticast mode [ 523.935919][ T9236] bridge_slave_1: entered promiscuous mode [ 524.077850][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.097557][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.116112][ T5140] Bluetooth: hci2: command tx timeout [ 524.250011][ T9236] team0: Port device team_slave_0 added [ 524.279977][ T9236] team0: Port device team_slave_1 added [ 524.366421][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.373430][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.405908][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.427692][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.434672][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.475011][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.607304][ T8908] veth0_vlan: entered promiscuous mode [ 524.659001][ T9236] hsr_slave_0: entered promiscuous mode [ 524.666351][ T9236] hsr_slave_1: entered promiscuous mode [ 524.690269][ T9236] debugfs: 'hsr0' already exists in 'hsr' [ 524.699035][ T9236] Cannot create hsr debugfs directory [ 524.751310][ T8908] veth1_vlan: entered promiscuous mode [ 524.897411][ T8908] veth0_macvtap: entered promiscuous mode [ 524.931525][ T8908] veth1_macvtap: entered promiscuous mode [ 525.072180][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.139886][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.211984][ T9236] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 525.226373][ T1090] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.244128][ T1090] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.258845][ T9236] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 525.274637][ T1090] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.284132][ T1090] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.300850][ T9236] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 525.313780][ T9236] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 525.350051][ T7897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.431324][ T7897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.517488][ T7897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.556312][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.564171][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.618367][ T7897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.663809][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.675460][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.728020][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.760473][ T9236] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.819494][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.826887][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.956658][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.963846][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.977511][ T9289] loop1: detected capacity change from 0 to 256 [ 525.995954][ T9289] exfat: Deprecated parameter 'utf8' [ 526.015033][ T9289] exfat: Unexpected value for 'utf8' [ 526.195088][ T5140] Bluetooth: hci2: command tx timeout [ 528.769038][ T5835] Bluetooth: hci2: command tx timeout [ 529.614841][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 530.854926][ T5835] Bluetooth: hci2: command tx timeout [ 532.670618][ T9304] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.705'. [ 532.816164][ T94] ------------[ cut here ]------------ [ 532.822185][ T94] time_after(jiffies, timeout) [ 532.822206][ T94] WARNING: io_uring/io_uring.c:2342 at io_ring_exit_work+0x42d/0xd15, CPU#0: kworker/u8:5/94 [ 532.838707][ T94] Modules linked in: [ 532.843024][ T94] CPU: 0 UID: 0 PID: 94 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.856808][ T94] Tainted: [L]=SOFTLOCKUP [ 532.861162][ T94] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.872403][ T94] Workqueue: iou_exit io_ring_exit_work [ 532.878059][ T94] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 532.883836][ T94] Code: 8e e8 f7 2c 3f 01 48 8b 05 d0 ca 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 1e 8f d3 00 4d 85 ed 79 12 e8 34 94 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 22 94 d3 00 48 8b 74 24 38 [ 532.903906][ T94] RSP: 0018:ffffc90002667ab0 EFLAGS: 00010293 [ 532.910212][ T94] RAX: 0000000000000000 RBX: ffff88804f852778 RCX: ffffffff813547c2 [ 532.918245][ T94] RDX: ffff88801e7bdb80 RSI: ffffffff813547cc RDI: ffff88801e7bdb80 [ 532.926301][ T94] RBP: ffffc90002667c38 R08: 0000000000000007 R09: 0000000000000000 [ 532.934289][ T94] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88804f852000 [ 532.942408][ T94] R13: fffffffffffffffa R14: dffffc0000000000 R15: 0000000000000000 [ 532.951679][ T94] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 532.961749][ T94] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.968420][ T94] CR2: 000000110c3e0d14 CR3: 000000000e598000 CR4: 0000000000350ef0 [ 532.976474][ T94] Call Trace: [ 532.979763][ T94] [ 532.982699][ T94] ? try_to_wake_up+0x154/0x1a80 [ 532.987734][ T94] ? __pfx_io_ring_exit_work+0x10/0x10 [ 532.993253][ T94] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 532.999172][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.004883][ T94] ? try_to_wake_up+0x160/0x1a80 [ 533.009860][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.015576][ T94] ? debug_object_deactivate+0x2e4/0x3b0 [ 533.021251][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.026973][ T94] ? rcu_is_watching+0x12/0xc0 [ 533.031774][ T94] process_one_work+0xa23/0x19a0 [ 533.037371][ T94] ? __pfx_process_one_work+0x10/0x10 [ 533.042752][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.048479][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.055631][ T94] worker_thread+0x5ef/0xe50 [ 533.060262][ T94] ? kthread+0x13a/0x450 [ 533.064501][ T94] ? __pfx_worker_thread+0x10/0x10 [ 533.070412][ T94] kthread+0x370/0x450 [ 533.074481][ T94] ? __pfx_kthread+0x10/0x10 [ 533.079097][ T94] ret_from_fork+0x754/0xd80 [ 533.084323][ T94] ? __pfx_ret_from_fork+0x10/0x10 [ 533.089568][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.095277][ T94] ? __switch_to+0x7b4/0x1120 [ 533.099982][ T94] ? __pfx_kthread+0x10/0x10 [ 533.104659][ T94] ret_from_fork_asm+0x1a/0x30 [ 533.109694][ T94] [ 533.112869][ T94] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 533.120176][ T94] CPU: 0 UID: 0 PID: 94 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.131405][ T94] Tainted: [L]=SOFTLOCKUP [ 533.135759][ T94] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 533.145851][ T94] Workqueue: iou_exit io_ring_exit_work [ 533.151464][ T94] Call Trace: [ 533.154766][ T94] [ 533.157709][ T94] dump_stack_lvl+0x100/0x190 [ 533.162412][ T94] vpanic+0x552/0x970 [ 533.166400][ T94] ? __pfx_vpanic+0x10/0x10 [ 533.170921][ T94] panic+0xd1/0xe0 [ 533.174666][ T94] ? __pfx_panic+0x10/0x10 [ 533.179115][ T94] ? check_panic_on_warn+0x1f/0x90 [ 533.184252][ T94] check_panic_on_warn.cold+0x19/0x34 [ 533.189633][ T94] ? io_ring_exit_work+0x42d/0xd15 [ 533.194857][ T94] __warn.cold+0x191/0x348 [ 533.199304][ T94] __report_bug+0x296/0x3d0 [ 533.203828][ T94] ? io_ring_exit_work+0x42d/0xd15 [ 533.209002][ T94] ? __pfx___report_bug+0x10/0x10 [ 533.214140][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.219807][ T94] ? trace_contention_end+0x140/0x180 [ 533.225222][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.230864][ T94] ? __mutex_lock+0x26a/0x1b90 [ 533.235641][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.241289][ T94] ? find_held_lock+0x2b/0x80 [ 533.245979][ T94] ? io_req_caches_free+0x49/0x60 [ 533.251017][ T94] ? io_req_caches_free+0x49/0x60 [ 533.256055][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.261706][ T94] ? io_ring_exit_work+0x42d/0xd15 [ 533.266840][ T94] report_bug+0xb2/0x220 [ 533.271104][ T94] ? io_ring_exit_work+0x42d/0xd15 [ 533.276243][ T94] handle_bug+0x16a/0x2a0 [ 533.280578][ T94] exc_invalid_op+0x17/0x50 [ 533.285086][ T94] asm_exc_invalid_op+0x1a/0x20 [ 533.290030][ T94] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 533.295770][ T94] Code: 8e e8 f7 2c 3f 01 48 8b 05 d0 ca 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 1e 8f d3 00 4d 85 ed 79 12 e8 34 94 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 22 94 d3 00 48 8b 74 24 38 [ 533.315389][ T94] RSP: 0018:ffffc90002667ab0 EFLAGS: 00010293 [ 533.321468][ T94] RAX: 0000000000000000 RBX: ffff88804f852778 RCX: ffffffff813547c2 [ 533.329442][ T94] RDX: ffff88801e7bdb80 RSI: ffffffff813547cc RDI: ffff88801e7bdb80 [ 533.337413][ T94] RBP: ffffc90002667c38 R08: 0000000000000007 R09: 0000000000000000 [ 533.345408][ T94] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88804f852000 [ 533.353392][ T94] R13: fffffffffffffffa R14: dffffc0000000000 R15: 0000000000000000 [ 533.361373][ T94] ? io_ring_exit_work+0x422/0xd15 [ 533.366512][ T94] ? io_ring_exit_work+0x42c/0xd15 [ 533.371675][ T94] ? try_to_wake_up+0x154/0x1a80 [ 533.376632][ T94] ? __pfx_io_ring_exit_work+0x10/0x10 [ 533.382126][ T94] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 533.388151][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.393818][ T94] ? try_to_wake_up+0x160/0x1a80 [ 533.398777][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.404423][ T94] ? debug_object_deactivate+0x2e4/0x3b0 [ 533.410099][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.415744][ T94] ? rcu_is_watching+0x12/0xc0 [ 533.420525][ T94] process_one_work+0xa23/0x19a0 [ 533.425487][ T94] ? __pfx_process_one_work+0x10/0x10 [ 533.430878][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.436563][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442217][ T94] worker_thread+0x5ef/0xe50 [ 533.446837][ T94] ? kthread+0x13a/0x450 [ 533.451084][ T94] ? __pfx_worker_thread+0x10/0x10 [ 533.456223][ T94] kthread+0x370/0x450 [ 533.460389][ T94] ? __pfx_kthread+0x10/0x10 [ 533.464990][ T94] ret_from_fork+0x754/0xd80 [ 533.469591][ T94] ? __pfx_ret_from_fork+0x10/0x10 [ 533.474712][ T94] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.480369][ T94] ? __switch_to+0x7b4/0x1120 [ 533.485067][ T94] ? __pfx_kthread+0x10/0x10 [ 533.489839][ T94] ret_from_fork_asm+0x1a/0x30 [ 533.494657][ T94] [ 533.498083][ T94] Kernel Offset: disabled [ 533.502413][ T94] Rebooting in 86400 seconds..