last executing test programs: 15.800604825s ago: executing program 3 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 15.798903838s ago: executing program 4 (id=107): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) mlock(&(0x7f00005b3000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file1\x00', 0x0, 0x1c}, 0x18) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000000003) 15.579438676s ago: executing program 0 (id=109): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = fsmount(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchdir(r3) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 13.270646126s ago: executing program 3 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) socket(0x84000000002a, 0x1, 0xff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6f, 0x100) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 12.346200921s ago: executing program 4 (id=115): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 11.889408378s ago: executing program 0 (id=117): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x74, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x74}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.87775219s ago: executing program 2 (id=118): mremap(&(0x7f00001f6000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000717000/0x2000)=nil) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)='_', 0x1}], 0x1}}], 0x1, 0x4008000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 11.630410578s ago: executing program 2 (id=119): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() shutdown(r0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 11.55673588s ago: executing program 0 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) socket(0x84000000002a, 0x1, 0xff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 10.708154292s ago: executing program 2 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) socket(0x84000000002a, 0x1, 0xff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 9.556933465s ago: executing program 0 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) mlock(&(0x7f00005b3000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file1\x00', 0x0, 0x1c}, 0x18) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000000003) 9.118581912s ago: executing program 4 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.805882683s ago: executing program 3 (id=125): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 7.257344439s ago: executing program 4 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) mlock(&(0x7f00005b3000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file1\x00', 0x0, 0x1c}, 0x18) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000000003) 7.22702418s ago: executing program 2 (id=127): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 6.916136437s ago: executing program 0 (id=128): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) r3 = openat$sndseq(0xffffff9c, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x1c, 0x6042c, 0x1, 0x1, 0x6, 0x8, 0x9, 0x0, 0x3, 0x4}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0x8, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x1000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0x4, 0x8000000, 0xd, 0x7, 0x10, 0x81, 0x4, 0x13, 0x4, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x7b, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x4, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x8, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xeeee0000, 0xd, 0x4, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xb, 0x8}, {0x100000, 0x5}, {0xffff1000, 0x9}, 0xa0000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 6.72329063s ago: executing program 1 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}], 0x10, 0x26}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 5.666527768s ago: executing program 3 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000004, 0x0, @mcast1, @empty, 0x90, 0x80, 0xfffffffc, 0xdc67}}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a0102"], 0x14}}, 0x40090) 5.661251991s ago: executing program 1 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, r8) 5.382547532s ago: executing program 3 (id=133): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x74, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x74}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.340822388s ago: executing program 1 (id=134): mremap(&(0x7f00001f6000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000717000/0x2000)=nil) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)='_', 0x1}], 0x1}}], 0x1, 0x4008000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 5.118314956s ago: executing program 1 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5.117099731s ago: executing program 3 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) mlock(&(0x7f00005b3000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file1\x00', 0x0, 0x1c}, 0x18) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000000003) 4.838643519s ago: executing program 1 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074857b9e65ac4a001f0c0000e4ceb56c"], 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) 3.977397751s ago: executing program 2 (id=138): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0xc, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd03010000000000dd200000000000006916320000000000bf67000000000000a406000007ff07006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3.763845499s ago: executing program 1 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 3.14434174s ago: executing program 2 (id=140): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f000000b200)=[{{&(0x7f0000000040)={0xa, 0xfa04, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001880)="96", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)='8', 0x1}], 0x1}}], 0x2, 0x20004051) 2.979241586s ago: executing program 0 (id=141): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r4 = fsmount(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchdir(r4) ioctl$NS_GET_OWNER_UID(r4, 0xb704, 0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 2.705843272s ago: executing program 4 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 0s ago: executing program 4 (id=143): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 63.980166][ T5824] cgroup: Unknown subsys name 'net' [ 64.131903][ T5824] cgroup: Unknown subsys name 'cpuset' [ 64.141042][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.576523][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.103433][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.115846][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.124528][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.136098][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.145371][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.177673][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.203523][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.212552][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.221798][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.232978][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.241133][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.245892][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.251752][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.265212][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.273955][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.281877][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.283469][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.289572][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.299999][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.311692][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.320551][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.329323][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.337401][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.338361][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.365366][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.902054][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.059168][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 70.120551][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 70.143369][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 70.219931][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.227862][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.235132][ T5837] bridge_slave_0: entered allmulticast mode [ 70.242811][ T5837] bridge_slave_0: entered promiscuous mode [ 70.322723][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.330048][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.337230][ T5837] bridge_slave_1: entered allmulticast mode [ 70.345189][ T5837] bridge_slave_1: entered promiscuous mode [ 70.446405][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 70.464022][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.472470][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.480344][ T5841] bridge_slave_0: entered allmulticast mode [ 70.488697][ T5841] bridge_slave_0: entered promiscuous mode [ 70.511993][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.537358][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.544980][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.552547][ T5841] bridge_slave_1: entered allmulticast mode [ 70.560223][ T5841] bridge_slave_1: entered promiscuous mode [ 70.567940][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.575293][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.582684][ T5845] bridge_slave_0: entered allmulticast mode [ 70.590228][ T5845] bridge_slave_0: entered promiscuous mode [ 70.601876][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.633666][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.641151][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.648558][ T5843] bridge_slave_0: entered allmulticast mode [ 70.656037][ T5843] bridge_slave_0: entered promiscuous mode [ 70.677163][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.684901][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.692451][ T5845] bridge_slave_1: entered allmulticast mode [ 70.700023][ T5845] bridge_slave_1: entered promiscuous mode [ 70.732922][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.740500][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.748692][ T5843] bridge_slave_1: entered allmulticast mode [ 70.756421][ T5843] bridge_slave_1: entered promiscuous mode [ 70.818645][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.841099][ T5837] team0: Port device team_slave_0 added [ 70.867292][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.880980][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.893094][ T5837] team0: Port device team_slave_1 added [ 70.909200][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.933815][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.971480][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.039240][ T5841] team0: Port device team_slave_0 added [ 71.058327][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.065605][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.091977][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.104180][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.111747][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.119057][ T5842] bridge_slave_0: entered allmulticast mode [ 71.126370][ T5842] bridge_slave_0: entered promiscuous mode [ 71.147057][ T5841] team0: Port device team_slave_1 added [ 71.155538][ T5845] team0: Port device team_slave_0 added [ 71.162950][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.170062][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.196082][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.207429][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.215018][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.223197][ T5842] bridge_slave_1: entered allmulticast mode [ 71.231181][ T5842] bridge_slave_1: entered promiscuous mode [ 71.241198][ T5843] team0: Port device team_slave_0 added [ 71.249567][ T5851] Bluetooth: hci0: command tx timeout [ 71.264142][ T5845] team0: Port device team_slave_1 added [ 71.289451][ T5843] team0: Port device team_slave_1 added [ 71.326144][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333620][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.356001][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.363294][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.389385][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.400316][ T5851] Bluetooth: hci3: command tx timeout [ 71.408075][ T5846] Bluetooth: hci1: command tx timeout [ 71.408490][ T5162] Bluetooth: hci2: command tx timeout [ 71.414952][ T5851] Bluetooth: hci4: command tx timeout [ 71.436108][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.457549][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.465437][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.491980][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.504488][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.511776][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.538367][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.564496][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.575439][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.582617][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.613537][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.633720][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.640745][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.666718][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.701093][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.708184][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.735267][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.766639][ T5837] hsr_slave_0: entered promiscuous mode [ 71.774117][ T5837] hsr_slave_1: entered promiscuous mode [ 71.796176][ T5842] team0: Port device team_slave_0 added [ 71.806341][ T5842] team0: Port device team_slave_1 added [ 71.900889][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.908213][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.936283][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.964474][ T5845] hsr_slave_0: entered promiscuous mode [ 71.971436][ T5845] hsr_slave_1: entered promiscuous mode [ 71.978231][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 71.984288][ T5845] Cannot create hsr debugfs directory [ 72.001563][ T5841] hsr_slave_0: entered promiscuous mode [ 72.009426][ T5841] hsr_slave_1: entered promiscuous mode [ 72.016031][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 72.022061][ T5841] Cannot create hsr debugfs directory [ 72.039627][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.046851][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.074738][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.124622][ T5843] hsr_slave_0: entered promiscuous mode [ 72.131399][ T5843] hsr_slave_1: entered promiscuous mode [ 72.138435][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 72.144266][ T5843] Cannot create hsr debugfs directory [ 72.354614][ T5842] hsr_slave_0: entered promiscuous mode [ 72.361639][ T5842] hsr_slave_1: entered promiscuous mode [ 72.368591][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 72.374338][ T5842] Cannot create hsr debugfs directory [ 72.807577][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.821350][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.850032][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.871410][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.953036][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.964677][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.977249][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.988587][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.121103][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.135013][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.154355][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.170676][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.293256][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.317348][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.325772][ T5851] Bluetooth: hci0: command tx timeout [ 73.344504][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.356357][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.368547][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.474754][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.482532][ T5162] Bluetooth: hci4: command tx timeout [ 73.482877][ T5856] Bluetooth: hci3: command tx timeout [ 73.488085][ T5851] Bluetooth: hci2: command tx timeout [ 73.494469][ T5846] Bluetooth: hci1: command tx timeout [ 73.521814][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.533781][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.551905][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.564655][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.583159][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.619905][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.628420][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.686410][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.694499][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.733806][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.776502][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.783863][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.832966][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.840273][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.977571][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.062622][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.092811][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.110361][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.118008][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.175571][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.182957][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.242789][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.263608][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.313513][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.320939][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.375167][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.391243][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.398518][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.436515][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.443925][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.459854][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.504244][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.511579][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.608629][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.786708][ T5837] veth0_vlan: entered promiscuous mode [ 74.851604][ T5837] veth1_vlan: entered promiscuous mode [ 74.910597][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.986574][ T5843] veth0_vlan: entered promiscuous mode [ 75.066178][ T5843] veth1_vlan: entered promiscuous mode [ 75.100481][ T5837] veth0_macvtap: entered promiscuous mode [ 75.113923][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.154924][ T5837] veth1_macvtap: entered promiscuous mode [ 75.185708][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.265898][ T5841] veth0_vlan: entered promiscuous mode [ 75.303319][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.335386][ T5843] veth0_macvtap: entered promiscuous mode [ 75.353621][ T5841] veth1_vlan: entered promiscuous mode [ 75.366186][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.396131][ T5843] veth1_macvtap: entered promiscuous mode [ 75.404414][ T5846] Bluetooth: hci0: command tx timeout [ 75.454522][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.469324][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.487165][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.518798][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.558788][ T5846] Bluetooth: hci3: command tx timeout [ 75.560283][ T5162] Bluetooth: hci1: command tx timeout [ 75.572579][ T5851] Bluetooth: hci4: command tx timeout [ 75.575958][ T5856] Bluetooth: hci2: command tx timeout [ 75.612575][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.622979][ T5845] veth0_vlan: entered promiscuous mode [ 75.665871][ T5841] veth0_macvtap: entered promiscuous mode [ 75.685414][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.717681][ T5841] veth1_macvtap: entered promiscuous mode [ 75.751002][ T5845] veth1_vlan: entered promiscuous mode [ 75.784066][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.794455][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.837972][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.847253][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.872392][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.886351][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.946570][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.974781][ T5842] veth0_vlan: entered promiscuous mode [ 75.991953][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.051893][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.064399][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.067676][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.083802][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.125430][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.134360][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.151247][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.160735][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.169487][ T5845] veth0_macvtap: entered promiscuous mode [ 76.183183][ T5842] veth1_vlan: entered promiscuous mode [ 76.201987][ T5845] veth1_macvtap: entered promiscuous mode [ 76.274122][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.328867][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.344180][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.367356][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.434092][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.443399][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.458321][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.515243][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.055089][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.095900][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.105656][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.175629][ T5960] random: crng reseeded on system resumption [ 77.183727][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.194271][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.216394][ T5842] veth0_macvtap: entered promiscuous mode [ 77.270890][ T5842] veth1_macvtap: entered promiscuous mode [ 77.321816][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.463252][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 77.464146][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.480105][ T5856] Bluetooth: hci0: command tx timeout [ 77.490190][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.503529][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.639550][ T5856] Bluetooth: hci2: command tx timeout [ 77.639583][ T5162] Bluetooth: hci3: command tx timeout [ 77.646276][ T5856] Bluetooth: hci1: command tx timeout [ 77.651711][ T5851] Bluetooth: hci4: command tx timeout [ 77.666189][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.685876][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.721939][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.732609][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.748899][ T1160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.749138][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.095620][ T5972] loop2: detected capacity change from 0 to 256 [ 78.109193][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.135120][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.231844][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.252147][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.321734][ T5968] loop1: detected capacity change from 0 to 40427 [ 78.395525][ T5968] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 78.436640][ T5968] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 78.494354][ T5968] F2FS-fs (loop1): invalid crc value [ 79.303991][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.361121][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 79.613999][ T5968] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 79.684260][ T5968] F2FS-fs (loop1): Start checkpoint disabled! [ 79.754333][ T5968] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 79.787140][ T5968] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 79.812223][ T5968] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 79.925495][ T5990] futex_wake_op: syz.4.5 tries to shift op by 32; fix this program [ 80.101740][ T5997] random: crng reseeded on system resumption [ 80.591938][ T5999] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 81.008257][ T58] kworker/u8:4: attempt to access beyond end of device [ 81.008257][ T58] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 81.090450][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 81.090475][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.090485][ T58] Workqueue: writeback wb_workfn (flush-7:1) [ 81.090522][ T58] Call Trace: [ 81.090533][ T58] [ 81.090540][ T58] dump_stack_lvl+0xe8/0x150 [ 81.090567][ T58] f2fs_handle_critical_error+0x37c/0x540 [ 81.090596][ T58] f2fs_write_end_io+0x1274/0x1740 [ 81.090632][ T58] __submit_merged_bio+0x256/0x700 [ 81.090660][ T58] __submit_merged_write_cond+0x3c9/0x4e0 [ 81.090689][ T58] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 81.090731][ T58] f2fs_write_data_pages+0x287e/0x34f0 [ 81.090786][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 81.090877][ T58] ? __lock_acquire+0x6b5/0x2cf0 [ 81.090912][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 81.090935][ T58] do_writepages+0x32e/0x550 [ 81.090961][ T58] ? reacquire_held_locks+0x104/0x190 [ 81.090977][ T58] ? writeback_sb_inodes+0x477/0x1a20 [ 81.091011][ T58] __writeback_single_inode+0x133/0x11a0 [ 81.091032][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 81.091056][ T58] writeback_sb_inodes+0x992/0x1a20 [ 81.091103][ T58] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 81.091120][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 81.091176][ T58] ? rcu_is_watching+0x15/0xb0 [ 81.091202][ T58] wb_writeback+0x456/0xb70 [ 81.091225][ T58] ? queue_io+0x1d1/0x4a0 [ 81.091252][ T58] ? __pfx_wb_writeback+0x10/0x10 [ 81.091269][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 81.091304][ T58] wb_workfn+0x414/0xf50 [ 81.091324][ T58] ? look_up_lock_class+0x57/0x110 [ 81.091356][ T58] ? __pfx_wb_workfn+0x10/0x10 [ 81.091379][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 81.091402][ T58] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 81.091438][ T58] ? process_one_work+0x8bb/0x1780 [ 81.091461][ T58] process_one_work+0x9ab/0x1780 [ 81.091502][ T58] ? __pfx_process_one_work+0x10/0x10 [ 81.091522][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 81.091557][ T58] worker_thread+0xba8/0x11e0 [ 81.091599][ T58] kthread+0x388/0x470 [ 81.091619][ T58] ? __pfx_worker_thread+0x10/0x10 [ 81.091633][ T58] ? __pfx_kthread+0x10/0x10 [ 81.091652][ T58] ret_from_fork+0x51e/0xb90 [ 81.091678][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 81.091697][ T58] ? __switch_to+0xc7d/0x1450 [ 81.091722][ T58] ? __pfx_kthread+0x10/0x10 [ 81.091741][ T58] ret_from_fork_asm+0x1a/0x30 [ 81.091774][ T58] [ 81.091782][ T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 81.421638][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 81.421663][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.421673][ T58] Workqueue: writeback wb_workfn (flush-7:1) [ 81.421701][ T58] Call Trace: [ 81.421708][ T58] [ 81.421716][ T58] dump_stack_lvl+0xe8/0x150 [ 81.421743][ T58] f2fs_handle_critical_error+0x37c/0x540 [ 81.421773][ T58] f2fs_write_end_io+0x1274/0x1740 [ 81.421812][ T58] __submit_merged_bio+0x256/0x700 [ 81.421841][ T58] __submit_merged_write_cond+0x3c9/0x4e0 [ 81.421872][ T58] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 81.421916][ T58] f2fs_write_data_pages+0x287e/0x34f0 [ 81.421972][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 81.422072][ T58] ? __lock_acquire+0x6b5/0x2cf0 [ 81.422113][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 81.422136][ T58] do_writepages+0x32e/0x550 [ 81.422160][ T58] ? reacquire_held_locks+0x104/0x190 [ 81.422176][ T58] ? writeback_sb_inodes+0x477/0x1a20 [ 81.422203][ T58] __writeback_single_inode+0x133/0x11a0 [ 81.422229][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 81.422254][ T58] writeback_sb_inodes+0x992/0x1a20 [ 81.422303][ T58] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 81.422320][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 81.422380][ T58] ? rcu_is_watching+0x15/0xb0 [ 81.422408][ T58] wb_writeback+0x456/0xb70 [ 81.422432][ T58] ? queue_io+0x1d1/0x4a0 [ 81.422461][ T58] ? __pfx_wb_writeback+0x10/0x10 [ 81.422478][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 81.422514][ T58] wb_workfn+0x414/0xf50 [ 81.422535][ T58] ? look_up_lock_class+0x57/0x110 [ 81.422570][ T58] ? __pfx_wb_workfn+0x10/0x10 [ 81.422595][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 81.422618][ T58] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 81.422658][ T58] ? process_one_work+0x8bb/0x1780 [ 81.422679][ T58] process_one_work+0x9ab/0x1780 [ 81.422726][ T58] ? __pfx_process_one_work+0x10/0x10 [ 81.422746][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 81.422785][ T58] worker_thread+0xba8/0x11e0 [ 81.422830][ T58] kthread+0x388/0x470 [ 81.422849][ T58] ? __pfx_worker_thread+0x10/0x10 [ 81.422863][ T58] ? __pfx_kthread+0x10/0x10 [ 81.422884][ T58] ret_from_fork+0x51e/0xb90 [ 81.422911][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 81.422931][ T58] ? __switch_to+0xc7d/0x1450 [ 81.422956][ T58] ? __pfx_kthread+0x10/0x10 [ 81.422977][ T58] ret_from_fork_asm+0x1a/0x30 [ 81.423020][ T58] [ 81.424077][ T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 81.710860][ T6002] ======================================================= [ 81.710860][ T6002] WARNING: The mand mount option has been deprecated and [ 81.710860][ T6002] and is ignored by this kernel. Remove the mand [ 81.710860][ T6002] option from the mount to silence this warning. [ 81.710860][ T6002] ======================================================= [ 81.711735][ T30] audit: type=1326 audit(1773984690.232:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 81.846110][ T5991] loop2: detected capacity change from 0 to 40427 [ 81.873542][ T5991] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 81.927050][ T5991] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 82.006439][ T5991] F2FS-fs (loop2): invalid crc value [ 82.022917][ T30] audit: type=1326 audit(1773984690.242:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 82.200626][ T30] audit: type=1326 audit(1773984690.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 82.447854][ T30] audit: type=1326 audit(1773984690.282:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 82.484120][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.515087][ T30] audit: type=1326 audit(1773984690.282:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 82.528112][ T5991] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 83.351805][ T5991] F2FS-fs (loop2): Start checkpoint disabled! [ 83.423642][ T5991] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 83.528342][ T30] audit: type=1326 audit(1773984690.302:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd8f35cfce code=0x7ffc0000 [ 83.966091][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 84.149258][ T30] audit: type=1326 audit(1773984690.312:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 84.328119][ T30] audit: type=1326 audit(1773984690.312:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 84.376857][ T30] audit: type=1326 audit(1773984690.312:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd8f39c799 code=0x7ffc0000 [ 84.383418][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 86.738032][ T997] cfg80211: failed to load regulatory.db [ 86.961197][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 88.231225][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'. [ 88.746196][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 89.287582][ T30] audit: type=1326 audit(1773984697.742:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.634573][ T30] audit: type=1326 audit(1773984697.752:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.657505][ T30] audit: type=1326 audit(1773984697.752:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.705303][ T30] audit: type=1326 audit(1773984697.762:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.791819][ T30] audit: type=1326 audit(1773984697.762:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.819580][ T30] audit: type=1326 audit(1773984697.772:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f69a635cfce code=0x7ffc0000 [ 89.846003][ T30] audit: type=1326 audit(1773984697.772:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.875702][ T30] audit: type=1326 audit(1773984697.772:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.921132][ T30] audit: type=1326 audit(1773984697.772:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 89.956904][ T6058] loop1: detected capacity change from 0 to 512 [ 89.991198][ T6058] EXT4-fs: Ignoring removed orlov option [ 90.007825][ T30] audit: type=1326 audit(1773984697.772:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a639c799 code=0x7ffc0000 [ 90.033932][ T6058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.057693][ T6058] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.093562][ T6058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.161684][ T6058] EXT4-fs (loop1): 1 truncate cleaned up [ 90.245215][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.309708][ T6058] netlink: 'syz.1.24': attribute type 9 has an invalid length. [ 90.325374][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 90.485256][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.991969][ T6081] random: crng reseeded on system resumption [ 93.222048][ T6084] random: crng reseeded on system resumption [ 93.253070][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 94.192769][ T6096] random: crng reseeded on system resumption [ 94.514583][ T6109] futex_wake_op: syz.1.36 tries to shift op by 32; fix this program [ 94.528446][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 94.724141][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 94.881288][ T6124] capability: warning: `syz.3.38' uses deprecated v2 capabilities in a way that may be insecure [ 95.320680][ T6125] random: crng reseeded on system resumption [ 97.446621][ T6134] loop3: detected capacity change from 0 to 8192 [ 97.553955][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 97.553990][ T30] audit: type=1326 audit(1773984706.052:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 97.941922][ T30] audit: type=1326 audit(1773984706.052:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 97.989578][ T6137] futex_wake_op: syz.4.43 tries to shift op by 32; fix this program [ 98.014350][ T5887] loop3: p1 < > p3 p4 < > [ 98.024809][ T30] audit: type=1326 audit(1773984706.062:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 98.051757][ T5887] loop3: p3 size 218103808 extends beyond EOD, truncated [ 98.059567][ T6144] random: crng reseeded on system resumption [ 98.218413][ T30] audit: type=1326 audit(1773984706.062:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 98.248619][ T6134] loop3: p1 < > p3 p4 < > [ 98.267183][ T6134] loop3: p3 size 218103808 extends beyond EOD, truncated [ 98.324652][ T30] audit: type=1326 audit(1773984706.062:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 100.338236][ T30] audit: type=1326 audit(1773984706.072:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3debb5cfce code=0x7ffc0000 [ 100.361969][ T30] audit: type=1326 audit(1773984706.072:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 101.348699][ T30] audit: type=1326 audit(1773984706.072:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 101.542328][ T30] audit: type=1326 audit(1773984706.072:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 101.637687][ T30] audit: type=1326 audit(1773984706.072:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 102.852590][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 102.852607][ T30] audit: type=1326 audit(1773984706.082:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 102.910244][ T6162] loop2: detected capacity change from 0 to 256 [ 103.976198][ T6005] udevd[6005]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 103.994095][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 104.128173][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 104.169688][ T30] audit: type=1326 audit(1773984712.682:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 104.214626][ T6171] udevd[6171]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 104.231740][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 104.246902][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 104.334898][ T30] audit: type=1326 audit(1773984712.682:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 104.357812][ T30] audit: type=1326 audit(1773984712.682:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 104.427789][ T30] audit: type=1326 audit(1773984712.682:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 105.041475][ T30] audit: type=1326 audit(1773984712.682:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 105.064187][ T30] audit: type=1326 audit(1773984712.682:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 105.091788][ T30] audit: type=1326 audit(1773984712.682:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 105.114599][ T30] audit: type=1326 audit(1773984712.682:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 105.204153][ T6185] loop3: detected capacity change from 0 to 512 [ 105.358885][ T30] audit: type=1326 audit(1773984712.682:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 105.466411][ T6185] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.582299][ T6185] EXT4-fs (loop3): mount failed [ 106.166315][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 108.087550][ T6217] Zero length message leads to an empty skb [ 108.681925][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 108.681962][ T30] audit: type=1326 audit(1773984717.152:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 108.961074][ T30] audit: type=1326 audit(1773984717.152:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.004618][ T30] audit: type=1326 audit(1773984717.162:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.102989][ T30] audit: type=1326 audit(1773984717.162:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.139011][ T30] audit: type=1326 audit(1773984717.162:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.161268][ T30] audit: type=1326 audit(1773984717.162:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.207928][ T30] audit: type=1326 audit(1773984717.162:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.282918][ T30] audit: type=1326 audit(1773984717.162:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.331029][ T30] audit: type=1326 audit(1773984717.172:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 109.512335][ T30] audit: type=1326 audit(1773984717.172:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 112.172993][ T6242] loop4: detected capacity change from 0 to 256 [ 112.738522][ T6251] loop3: detected capacity change from 0 to 2048 [ 112.763256][ T6251] EXT4-fs (loop3): Invalid log cluster size: 16776453 [ 112.852352][ T6251] loop3: detected capacity change from 0 to 512 [ 113.521922][ T6251] EXT4-fs: Ignoring removed orlov option [ 113.615197][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 113.682027][ T6251] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 113.693496][ T6238] loop1: detected capacity change from 0 to 40427 [ 113.747888][ T6238] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 113.781023][ T6238] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 113.784843][ T6258] loop2: detected capacity change from 0 to 256 [ 113.804325][ T6259] loop4: detected capacity change from 0 to 512 [ 113.837379][ T6259] EXT4-fs: Ignoring removed orlov option [ 113.851049][ T6238] F2FS-fs (loop1): invalid crc value [ 114.065974][ T6259] EXT4-fs (loop4): Test dummy encryption mode enabled [ 114.107890][ T6259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.669609][ T6259] EXT4-fs (loop4): 1 truncate cleaned up [ 114.700903][ T6238] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 114.732880][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.756012][ T6238] F2FS-fs (loop1): Start checkpoint disabled! [ 114.789297][ T6238] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 114.982219][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.377874][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 115.377911][ T30] audit: type=1326 audit(1773984723.822:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 115.677913][ T30] audit: type=1326 audit(1773984723.822:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 115.726155][ T30] audit: type=1326 audit(1773984723.822:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 115.787818][ T30] audit: type=1326 audit(1773984723.822:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 115.927813][ T30] audit: type=1326 audit(1773984723.822:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 115.978885][ T30] audit: type=1326 audit(1773984723.822:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a9c55cfce code=0x7ffc0000 [ 116.023247][ T30] audit: type=1326 audit(1773984723.822:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 116.069019][ T30] audit: type=1326 audit(1773984723.822:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 116.126077][ T6283] loop2: detected capacity change from 0 to 256 [ 116.142420][ T30] audit: type=1326 audit(1773984723.832:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 116.199925][ T30] audit: type=1326 audit(1773984723.832:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c59c799 code=0x7ffc0000 [ 117.381110][ T6290] loop2: detected capacity change from 0 to 256 [ 117.622715][ T6279] loop4: detected capacity change from 0 to 40427 [ 117.682976][ T6279] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 117.705294][ T6279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 118.371987][ T6279] F2FS-fs (loop4): invalid crc value [ 118.608618][ T6279] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 118.634374][ T6279] F2FS-fs (loop4): Start checkpoint disabled! [ 118.638300][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 118.660235][ T6279] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 118.680676][ T6279] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 118.696640][ T6279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 118.773586][ T6301] loop3: detected capacity change from 0 to 512 [ 118.788798][ T6285] loop1: detected capacity change from 0 to 40427 [ 118.799576][ T6301] EXT4-fs: Ignoring removed orlov option [ 118.811142][ T6285] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 118.830047][ T6285] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 118.858255][ T6285] F2FS-fs (loop1): invalid crc value [ 118.873907][ T6301] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.905272][ T6301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.102190][ T6301] EXT4-fs (loop3): 1 truncate cleaned up [ 119.133134][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.795078][ T6285] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 119.931296][ T6301] netlink: 'syz.3.83': attribute type 9 has an invalid length. [ 119.940567][ T6285] F2FS-fs (loop1): Start checkpoint disabled! [ 119.980293][ T6285] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 119.989633][ T6303] loop0: detected capacity change from 0 to 40427 [ 119.999913][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 120.016078][ T6303] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 120.027015][ T6303] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 120.109882][ T6303] F2FS-fs (loop0): invalid crc value [ 120.137646][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.758736][ T6303] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 122.264677][ T6303] F2FS-fs (loop0): Start checkpoint disabled! [ 122.331372][ T6303] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 122.590863][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.600163][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.650578][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.660060][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.567967][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 124.670433][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 126.878216][ T6388] loop4: detected capacity change from 0 to 512 [ 126.930889][ T6388] __quota_error: 4 callbacks suppressed [ 126.930907][ T6388] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 126.976112][ T6388] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.995345][ T6388] EXT4-fs (loop4): mount failed [ 128.515575][ T30] audit: type=1326 audit(1773984737.042:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 128.894953][ T30] audit: type=1326 audit(1773984737.042:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 128.930664][ T30] audit: type=1326 audit(1773984737.042:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 128.955206][ T30] audit: type=1326 audit(1773984737.042:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 128.978113][ T30] audit: type=1326 audit(1773984737.042:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 129.105020][ T30] audit: type=1326 audit(1773984737.042:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59fc15cfce code=0x7ffc0000 [ 129.127951][ T30] audit: type=1326 audit(1773984737.042:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 129.153946][ T30] audit: type=1326 audit(1773984737.042:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 129.179250][ T30] audit: type=1326 audit(1773984737.042:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59fc19c799 code=0x7ffc0000 [ 129.729218][ T6416] Cannot find add_set index 65532 as target [ 130.695945][ T6422] loop2: detected capacity change from 0 to 512 [ 130.752973][ T6422] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.904692][ T6422] EXT4-fs (loop2): mount failed [ 131.346330][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 132.929418][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938070][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.591200][ T6457] loop1: detected capacity change from 0 to 40427 [ 134.621563][ T6457] F2FS-fs (loop1): invalid crc value [ 135.068229][ T6471] Cannot find add_set index 65532 as target [ 135.717111][ T6457] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 135.767406][ T6457] F2FS-fs (loop1): Start checkpoint disabled! [ 135.813122][ T6457] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 135.853404][ T6457] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 135.941047][ T6459] loop4: detected capacity change from 0 to 40427 [ 136.559715][ T6459] F2FS-fs (loop4): invalid crc value [ 136.876003][ T6459] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 136.902354][ T6459] F2FS-fs (loop4): Start checkpoint disabled! [ 137.029915][ T58] kworker/u8:4: attempt to access beyond end of device [ 137.029915][ T58] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.057524][ T6459] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 137.075127][ T6459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 137.099037][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 137.099062][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.099072][ T58] Workqueue: writeback wb_workfn (flush-7:1) [ 137.099103][ T58] Call Trace: [ 137.099117][ T58] [ 137.099125][ T58] dump_stack_lvl+0xe8/0x150 [ 137.099154][ T58] f2fs_handle_critical_error+0x37c/0x540 [ 137.099183][ T58] f2fs_write_end_io+0x1274/0x1740 [ 137.099222][ T58] __submit_merged_bio+0x256/0x700 [ 137.099250][ T58] __submit_merged_write_cond+0x3c9/0x4e0 [ 137.099281][ T58] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 137.099327][ T58] f2fs_write_data_pages+0x287e/0x34f0 [ 137.099389][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.099427][ T58] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 137.099481][ T58] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 137.099527][ T58] ? __lock_acquire+0x6b5/0x2cf0 [ 137.099565][ T58] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 137.099586][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.099607][ T58] do_writepages+0x32e/0x550 [ 137.099636][ T58] ? reacquire_held_locks+0x104/0x190 [ 137.099652][ T58] ? writeback_sb_inodes+0x477/0x1a20 [ 137.099684][ T58] __writeback_single_inode+0x133/0x11a0 [ 137.099706][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 137.099731][ T58] writeback_sb_inodes+0x992/0x1a20 [ 137.099773][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 137.099799][ T58] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 137.099817][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.099879][ T58] ? rcu_is_watching+0x15/0xb0 [ 137.099907][ T58] wb_writeback+0x456/0xb70 [ 137.099931][ T58] ? queue_io+0x1d1/0x4a0 [ 137.099960][ T58] ? __pfx_wb_writeback+0x10/0x10 [ 137.099977][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.100015][ T58] wb_workfn+0x414/0xf50 [ 137.100035][ T58] ? look_up_lock_class+0x57/0x110 [ 137.100070][ T58] ? __pfx_wb_workfn+0x10/0x10 [ 137.100091][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.100120][ T58] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.100164][ T58] ? process_one_work+0x8bb/0x1780 [ 137.100185][ T58] process_one_work+0x9ab/0x1780 [ 137.100233][ T58] ? __pfx_process_one_work+0x10/0x10 [ 137.100253][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.100291][ T58] worker_thread+0xba8/0x11e0 [ 137.100337][ T58] kthread+0x388/0x470 [ 137.100357][ T58] ? __pfx_worker_thread+0x10/0x10 [ 137.100371][ T58] ? __pfx_kthread+0x10/0x10 [ 137.100391][ T58] ret_from_fork+0x51e/0xb90 [ 137.100418][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 137.100438][ T58] ? __switch_to+0xc7d/0x1450 [ 137.100463][ T58] ? __pfx_kthread+0x10/0x10 [ 137.100484][ T58] ret_from_fork_asm+0x1a/0x30 [ 137.100520][ T58] [ 137.104926][ T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 137.872151][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.197906][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 138.208686][ T5903] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.222845][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.252221][ T5903] usb 4-1: config 0 descriptor?? [ 139.467938][ T809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.617835][ T809] usb 3-1: device descriptor read/64, error -71 [ 139.941062][ T809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.529402][ T809] usb 3-1: device descriptor read/64, error -71 [ 140.647533][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 140.745617][ T5903] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 140.780204][ T5903] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 140.799614][ T809] usb usb3-port1: attempt power cycle [ 141.178038][ T809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.260224][ T809] usb 3-1: device descriptor read/8, error -71 [ 141.531065][ T809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.698436][ T809] usb 3-1: device descriptor read/8, error -71 [ 141.881257][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 141.881292][ T30] audit: type=1326 audit(1773984750.382:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.103753][ T809] usb usb3-port1: unable to enumerate USB device [ 142.328441][ T30] audit: type=1326 audit(1773984750.382:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.353813][ T30] audit: type=1326 audit(1773984750.392:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.512142][ T30] audit: type=1326 audit(1773984750.392:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.534951][ T30] audit: type=1326 audit(1773984750.392:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.584673][ T30] audit: type=1326 audit(1773984750.402:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3debb5cfce code=0x7ffc0000 [ 142.687877][ T30] audit: type=1326 audit(1773984750.402:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.758137][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 142.779332][ T30] audit: type=1326 audit(1773984750.402:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.853399][ T30] audit: type=1326 audit(1773984750.402:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 142.961681][ T30] audit: type=1326 audit(1773984750.402:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debb9c799 code=0x7ffc0000 [ 143.436343][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 146.930312][ T6555] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 146.942349][ T6555] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 146.950783][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 146.960254][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.970586][ T6555] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 146.976323][ T6555] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 146.996194][ T6555] RSP: 0018:ffffc9000d25f9a0 EFLAGS: 00010006 [ 147.002289][ T6555] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 147.010280][ T6555] RDX: 1ffff92001a4bf40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 147.018243][ T6555] RBP: ffffc9000d25faa0 R08: 0000000000000003 R09: 0000000000000004 [ 147.026292][ T6555] R10: dffffc0000000000 R11: fffff52001a4bf50 R12: 0000000000000000 [ 147.034286][ T6555] R13: ffff888021e8c150 R14: 0000000000000018 R15: ffffc9000d25fc20 [ 147.042253][ T6555] FS: 0000555571ada500(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 147.051173][ T6555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.058098][ T6555] CR2: 00007f6db363b068 CR3: 0000000078e32000 CR4: 00000000003526f0 [ 147.066062][ T6555] Call Trace: [ 147.069428][ T6555] [ 147.072387][ T6555] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 147.078679][ T6555] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 147.084148][ T6555] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.089705][ T6555] rwsem_del_wake_waiter+0x25d/0x2e0 [ 147.094987][ T6555] rwsem_down_write_slowpath+0xa6f/0x1080 [ 147.100702][ T6555] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 147.106592][ T6555] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 147.112749][ T6555] ? vm_mmap_pgoff+0x234/0x4f0 [ 147.117525][ T6555] down_write_killable+0x1eb/0x240 [ 147.122810][ T6555] ? __pfx_down_write_killable+0x10/0x10 [ 147.128435][ T6555] ? apparmor_mmap_file+0x197/0x3e0 [ 147.133622][ T6555] ? security_mmap_file+0x4df/0xa20 [ 147.138812][ T6555] vm_mmap_pgoff+0x234/0x4f0 [ 147.143403][ T6555] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 147.148565][ T6555] ? ksys_mmap_pgoff+0xf3/0x760 [ 147.153418][ T6555] ? __x64_sys_mmap+0x7f/0x140 [ 147.158263][ T6555] do_syscall_64+0x14d/0xf80 [ 147.163222][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.169308][ T6555] ? clear_bhb_loop+0x40/0x90 [ 147.173976][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.179933][ T6555] RIP: 0033:0x7f69a639c502 [ 147.184528][ T6555] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 147.204423][ T6555] RSP: 002b:00007ffeb4666fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 147.212838][ T6555] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f69a639c502 [ 147.220979][ T6555] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 147.229042][ T6555] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 147.237624][ T6555] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffeb4667130 [ 147.245656][ T6555] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 147.253625][ T6555] [ 147.256644][ T6555] Modules linked in: [ 147.260600][ T6555] ---[ end trace 0000000000000000 ]--- [ 147.266614][ T6555] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 147.272068][ T6555] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 147.291925][ T6555] RSP: 0018:ffffc9000d25f9a0 EFLAGS: 00010006 [ 147.298021][ T6555] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 147.305988][ T6555] RDX: 1ffff92001a4bf40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 147.313954][ T6555] RBP: ffffc9000d25faa0 R08: 0000000000000003 R09: 0000000000000004 [ 147.322004][ T6555] R10: dffffc0000000000 R11: fffff52001a4bf50 R12: 0000000000000000 [ 147.330144][ T6555] R13: ffff888021e8c150 R14: 0000000000000018 R15: ffffc9000d25fc20 [ 147.338120][ T6555] FS: 0000555571ada500(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 147.347149][ T6555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.353837][ T6555] CR2: 00007f6db363b068 CR3: 0000000078e32000 CR4: 00000000003526f0 [ 147.362175][ T6555] Kernel panic - not syncing: Fatal exception [ 147.368551][ T6555] Kernel Offset: disabled [ 147.372874][ T6555] Rebooting in 86400 seconds..