last executing test programs: 14.174914626s ago: executing program 0 (id=178): add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000280)=""/126, 0x7e, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 12.556993007s ago: executing program 0 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 11.957592432s ago: executing program 0 (id=182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x101, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendmmsg$inet(r0, &(0x7f0000007c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="e4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000009c0)="3bab33294bc16132b513d031e788abbfd2f3d8a4e29ed27eb30489431675a51fe2dc1ba1ce3bf78ce70c961c1b4bcfe0c984b18926b60dc64a4d634dc90af49dfeae1a4deac81b534d6a9d4ac599042a7cdc8043b9c1a7373977638569d3a3843fef7643870e8d45e9975e5046ff613a411edcf4267656db226b828775e72e4eb92b196e1cf22de2b5b6c40f8ff91e62cda2d2f5ae64fcd69651c8e2fe99beea756e2c1154610a4dbf11cae4dec58ade7b9a3fecbf53249021fba067745042c30f945bc1074c86d0e1d8d226df5d1fe2a4cd2a8734bf3a5788399779abdfbc58dc48e80997d1ec42115f1d9e223e215319047aab7f70b133046d042f12aa167c8aabe2b8c3143b085e9007b42e0825f0f38d3a2d6de304080e9cb45a7c9cc7357157c27841975589d11d98c97ca77e3f19721ee4e433d70dd67dda92f4665c4b733bb6efa368edc480a5f937a8a575fac6cf9bc33f97763f629dbbf1ac3435d05264bf1463d4d7ed56b18dd2d3400fced409359fad88b82e6ef4a1b46a37aa901ccb481d0103abc2bb37417c67ce8fdbfe33f2dc2f16c528480fcd512d4b3707e7c352de399a94d64acf684e8d6ea169d8aa974ce3bd1b67d75ab97f409f120b7d58c429a8a805fcc0ef62ae1e4fe8f2249f8ab1e137826c0661fab9b9ba7fd997910139c4da27269385224ce1a73f928910bf1c780324daa09717bbf9654a6cb76f66a1a87b160ffd5bdd27d396b20bc88861a3e0c7296da67403dc44da72640ad563a74f7e1244b9c5ae8811b7eaf5afe84ae5d1ae3ed6764ba4ac7d49000cec92ac917aefb7049e8aadc5bd4a215bb335bea1002c2a8b978a32d59bc62ab0a6faf9e785a1ca2b5332cea37957f308c32b08a1b336528af1dff5a447795ff2aaefab03dba4149f3b0410bdff39177415ce546ed40fc9f60f1e850b875c6c8d8a1980dca54b6a1392e55992ea3275b3e467070ba0e0d1cd4ead55d12230f3e1584eee1f5b710305ff36aaff7fa1da532a594deba0ff8428684377d8964c9da21d3e0da7a30e193722cb708ab2d71c4d7c6a87af9ec1b0be785c6720e59f92b501b521137d8351e4eb6b7cf6808344c606f75b25f4cc0b370b9ec25177165ac1a0244969f067980b45799be23a63bd1731355d986789d59a7d503e5a68cd0fc73d98f2e1b6bef0503593e9c7ea9f9d1910673d2b012b23bc71a3bac070d3c6ab0795ee82b63c35891b9f3e60dec0b61e3ee02767ca8aaad9c8078c4b3f418c655f85a4493908bf24a88aa9724cc6b87964c9d48f36b2b1eb1c169605235b858bafcbbdf8d7c1d44a9b09562eb0fc56335c25ddc0741b8bccb04ed606c72002c818a37b6bdf77ce277fdc7f291131ffc7ea8eee9ba713a071f9a1ea14372932f61e72774fee4cc23f60a9bfdea625289bd5101a3dbe69376246f01c9dd6eadf0311ce48c0493398fa8ee1abf48f86086b5f980205d199eb283ea5ebbc96928fc11fcb2104cefac8cc276e4de0a05f087f612bd52ba072d49f6c4032549dba3d54a9336e22738fb0691fa09c1f02a86099d8fdb46ae5db9891e74d4ee32c350b55887708e5a6183b20174eca8d5722df8f346939cf4ae0a9dbfe1f7c833b5125c0f4a28877e5dcce639e768f9e022a373c4eaa6b75f877de366f4c3627bb4cd2a40b105a4f7eeeb65075cadb534f44b738c06e6dbd24024d6cd5cddef1f4dbadfc2d560d62613e47deff7ff2505dbb28c5f320442ea13202bf077580c7a27123a9b79591c940bcb2dc750a5ee94e4e9d48c473e14b5eb842d15ee6b4463a13b2b2b556ecc089297cca48a08207cf4b9ec36b18d9e9a01a01e6a8e3b3cd24826761ba4db75d77d59fea5ee9a46a5e70e5b91b6db6c2045223310f9e46e32d3e0226bd6ed27939baa9f76addcbe52cb907b9be30e20ce3244d28c587c182be945d614ffa1132ee36bf83fd6443cf6671fc124ce49cfdb1b24f46bfd9a041a3b1e47fb37dd22937e2ebef549902b7e7f86856f5513bef00bb764cb3ddd1f86c12f175d4408c2133e8c814c9591320c65866e30b493c5c7aa2aa28f32f8a4c2716f0beceaef023f9598b680b142ebdb2aafaecdc55bed7ec0c170fe58cca3292ea21884b976a7e376156aa4ab0e7cd8d5aeb88738c24c87cf2a7cff20c0f8145d3d94d13826bb90d3203dedab414644390460fd8921660db14f52d191fa64a27d213b667e683b9606f4180c3270cc4ff234a52efa9e95f711847998b48fddc949067042c92bca50ec69284dace7ded0855dad836d8ac91e2711defe7877ba1cf0cbd188707f02c3f7b1fdb09717b5009c700bcfa51ffe3ccd95ffe28e820da62f5331bdd6ee96bf87a7e77b40cba41a1ac3045aa89a9739b0b81582f87ee9f71244c12896473ae7eb02496ec4ffdd3a0ccabca7288aa71fdcb7aaf61183d4056d1aeef5a132ee374b6c2c277bdbce26e06a52427077d3a03a33589878897690ed76bee8f65cca3b4bb6fb686752acc5cc9266f32b60d62f61597c6f780d7a31960fef799cddba3b633421d99ce5f5fc6fd0c9abc81408fbb5a9ed8abb9a6083ff08d7465e5f5789e23f3f5ac0b700305509707d6ab1525ec632f49f644efae3623cd01e78172291b24f4bda3e9324c2a31d82c770ddd1b5e5197f06a8f15b800ba078f2e229835ba5e3b65906a8e4aec6dcf283161f091474062c7bfbc3ea0d27028ba0ab2af77b86bc3bde7cd527e4b48af4e889431edbd1bab8d16faefe77fa3d3edb47d02e22d4402ec36fb6c1a5879dd0a426c7056d3ccd9ea1dadd2bc68fd2efac483bb98a8bd4f7714a5e8a3b152e3fbd4f711e095c4fc819b18ff6093528559a2fa31b41def928a2389407f61772e603fca54cc5e2b072294576d96de4e3ffaafbed7404bbe2961200aa19efb80440a40d5295646615b364d241a8675b7bbda48aca439e946c2aaecda7659b33add69c924bde284b633d881773d02ee26d9e39f402a4c86430e79f9dd117d0822ab408e0c49ef1cc3f3e6c9b36b7820047fecafe2c6eb4d613072a57ef3594847c9df224583744ab08b558437b4b61d0024360eb41b510089c125efcb813ec41dc31863f311208fff044f06e5a9e60fb24cdbe145393fb3509f855c93e7f73d5a7b09c6600ee4544a34ea74b19c3c26159265123299b0d2f2a8e35b98fddb8368ba284cc467877207bb775f347f4a99e46ec169bd62095a143cb18e565aa10dc4982fe34b6dccc09f48c2111129b1a3ae89b8c4b379d37d83c1f372912a0d638a18b1835a30d50cc56e8b7a5d4af770a96f9e1e6eb89e0c0923d3f30907888c1bdce3e2c6e7a8dd1ed04a33844385311e286cce95c7719df36cba4eac449acc14960b99ada320621e0905f9d1802bdd0719440e69b000225fe08db4291232752c9e3b6eef728245ec3adb2b4c87334ad6bb2fc517bd22973da53860f43bba07b408fae224d907b52fd2b769de79b861921fab99d61d2d4483bda8393931d418e8dfc3e9bf6097914b410a14724be8b244e9aa2c5e96c84390afc45403fc89aaf63dc3c702c4e0f135b9679f9a39d04cac23c4dbfc3b1ff335c5a345b2b3ca924833f7559aab202506a252ac7d3ed945e0b24cace52e9b11c38c7ebd7e2c822b81b9cb24350a4c9f566ddfa1444d930b9185dd353ff3d8925b3d82306201fc4a53a443962f4e4d62098abfebf26a9bdb12757edd137b05986fa8f4d47303a5fc5f7f67362362269ca4160012bb4323e80b0f45ca71eeeede8c802a0f9a707cab2211591938bff6627e952db2cfaf88e93106e6e813285bc8089727b6a2a63a6d273f845382fa42d8cb1627b09ef629e1e098a83b0d71604ac3a8cc957b5b82da0cd2adb8e3c63af0386a865ba5b252d898d58ea6afaaaef9c1bee78808cb942f7c240cefb0d2e079cfe534fc09b9198ace2d4c77e254c469b35aa93221d8fdee0fc487b8ec1dca1ff785cb89ee98c27dde24143c8fda5f71c58cffe594757b34c0e978adbbca82e545ad002f5aba5398bde7cbfebde6dc3f473ac8789f20d1fbc5bad2a19cc765e04dd39db7b0ad9ae1b8150e01f938a9629eba19154593775f744258ca4bdf3ba4e032ba06fd25a7538617431ab0f6dfa95e9889923dc9a6ad01bd93a0fb46fab34c17fa885a92e0261ac02fc8d1d6ccff85528837b9583ca4c614e8add0bb06799953caabf928d75896930e1a1bf39736458564d4f439c33d77eb3155de2dd47f54c8a29d15a6398af451e11668e4e899d1c61fb06ed7277e76d3437d1831f09b339dea330f3c156aebace924add26a1d1e08462837c4c0ce93c9107151e909f43c6ac487acda398f0dbb5e5ed61a624edca0be05bac2b1ab5da20dd39d276caab2cfa171317c28c01d6b16d643840d13950a02032be3644ad680aecdc29dd812f8afd963b1706c7d1f8995cedcbcba9ba5f1184f6a7b40e314af6aa9ac1a5eaf04f16796541fd85712c0ef3df8e6f0fe305eef38338050290c523c7924fd9536173d3acedfd0d43733def3d293d4d856f1cf485d8956dd34cb5e575f161f39d58a453e7ba254344e1944f2fc28d55375228e273daf9e2537d7fdca317c428f3c4d46971f171722ce4dbdb6a343cc0c60ff7fd83d0d91515b9b4d6a19d65f46672eff78ee5ff6c159855dbc56a674faf8325a538cd94aaa3caa70006b1eefaa353346b8e51f60a5a1663b051de3b234cc9c08003fe32fb44662ba734224100b9ab963fc63b70d9b4980eb48bd7e4c202e689957a93dc6aca4e4295ac6a923fdddf8ca060bbd446e337723f8902286078b6da1e1fb3baf5e7c42a64282eca7dcb220717a07e82df81f0828ecfa840b8b233b04d7fb0ccf5399418a6eaa087bcc36ab318d4af286180d10d750f960013cdd70e0b5daeeb1cb9af2057f8f99f8b426298e86f80a24389549da5f5097c082d890a35b840f1ab4a891710f3ddb637933a7dc94256256f2ab4e1b187a285cebeed5d6d8d4e9bdc5238be05db2e93e805978fa0732cfedb86c1ccb153cefa35fccb9b73732479c9a876d6e0b8c12acee944bfc064db5b0a340d0b98b1b5fb526f0bb981aac1ee29e1d8c9790e34ab73289953fa515e61db9a99743d1dc260daadd61d8146a3bde8b111dc46961ef6ee754cb53cd67e652319850ce4e089913411ce53ff23ecf7d1201fc87944a7a2b7b43f631298ed5743e6b37a104199d4ef6b852df7635c999d855c115fc8a21f0b63ef2dc750977348f71055861b12e158e6240ae34b92e57d0ee8ebfa513973913358c4a43674a5b2eeb2487d35c4c54935a1742def0734b084c45b4830b6bf56f87c9f73aafa3e871c66980af0723cc62aa929714c7a6b280fefe8b953d77be93032b0fa4b8a4bef4f8027eb3f086c2947228c1589089ad2283cb742a2c5c2979e911f733da877bebb4cc5f6a336265221022733ab5ecdae77b3e9aeb075deff2733652b831c440b1ecda433ad4b0571832086d7cb3a7387955f6025ca83b6d74d9dcd9c77461fd37106fd91a10d6e9661aaf1fe0a6b2908fdc0850396cf8434875629d24129f751e793c01a578fdaff8184cf6710dbe8abba126aae3292aa8e9af1c4e432d4264e259410ad27ad6421e1fd74a86b2cf24d9739b601f0ad42cf3872c47b9f1fe9c8a4811874fc79a9fc480d66e467e16a8d77191660ac0042806b4cb9149c61e6c6a107532ae0717f619ab8ba0f3477ef782b351d72ab783f0020edb20e1074ebec091d64e84f63fb49b04e3e1ea92697058e6fe820e4de93be9be01aeb963b5c1436b5d2ac5", 0x1000}], 0x1}}], 0x2, 0x0) 11.948695179s ago: executing program 1 (id=183): open(&(0x7f00009e1000)='./file0\x00', 0xa060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c5a29b}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.72403727s ago: executing program 0 (id=185): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, 0x0}, 0x90) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) 11.463014194s ago: executing program 1 (id=186): ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[], 0x1, 0x5b30, &(0x7f0000005b80)="$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") r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd344) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[], 0x1, 0x5e9, &(0x7f0000000cc0)="$eJzs3U9oHNcdB/DvrGXZ64KzSewkLYWKGEwbU1urbWoXCnVLKTqEYiiFXIW9toXXSpA2RQmlqP+vPeaQQ3pQDzn1mtJDaHruqXfdDb2LXlRmdlZaW4oi2bJ35X4+8Pa9t2/mvTc/zzztzGI2wP+t+bdzci1F5i+9tVrWN9Y7vY31zv1hOcmpJI1kapClWEqKz5PrGaR8tXyz7q74onHefPDpRxc//KQzqE3Vqdq+sd9+B7NWp8wkOVHnR9XfzSfur9g+wjJgF4aBg3Hb2mXtMLs/4XULTIJi8Hdzl1ZyJsnp+nNA6tWh8Wxnd/QOtcoBAADAMfXCZjazmrPjngcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJ/Xv/xd1agzLMymGv/8/Xb+XunysfTbuCQAAAAAAAADAEfjGZjazmrPD+lZRfef/elU5V71+Je9lJd0s53JWs5B++llOO0lrpKPp1YV+f7l9gD3n9txz7tkcLwAAAAAAAAA8Z07V+W8yv/P9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIIiOTHIqnRuWG6lMZXkdJLpcru15O/D8nH22bgnAAAAAM/AC5vZzGrODutbRXXP/0p1338672Up/Symn166uVU9Cxjc9Tc21ju9jfXO/TLt7veH/znUNKoeM3j2sPfIs9UW57f3mM9P8rNcykxuZDmL+UUW0k83M/lxVVpIkVb99KI1nOfe873+UO3Gl831tWomzdzOYjW3y7mZd9LLrTSqY6i22X/EX5fRKX5QO2CMbtV5eUR/qvPJ0KoicnI7IrN17MtovLh/JA55njw6UjuN7WdQ555CzM/UeRnrP0x0zOdGzr5X9o3E1lby73/cuNtbunf39sqlyTmkx/RoJDojkXh1/3Mi+dbzFInpOhqDVfRwq+Xr1b5ns5if5p3cSjdXM5t2rmU238tcOg+dYecPcK01DnetXfhmXWgm+WOdT4Yyri+OxHV0pWtVbaPv7ETppaNfkaa+VhfKMX5b55Ph0Ui0RyLx8v6R+PNW+brSW7q3fHfh3QOOd7HOy8v29xO1Npfny0vlP1ZVe/jsKNte3rOtXbWd225r7Go7v932ZVfqdP0ZbndPg7ZX92zrVG2vjbTt9SkHgIl35o0z080HzX81P27+rnm3+dbpH526durr0zn5z6m/nfhr4y+N7xdv5OP8auf+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHwr739wb6HX6y6PqfDfnyfjG11B4bko3ElyxD2Pe2UCnrYr/fvvXll5/4NvL95fuNO9012au3b12tXOd9vfuXJ7sdedHbyOe5bA07DzR3/cMwEAAAAAAAAAAAAO6ln8/4RxHyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwvM2/nZNrKdKevTxb1jfWO70yDcs7W04laSQpfpkUnyfXM0hpjXRXfNE4bz749KOLH37S2elrarh9Y7/9DmatTplJcqLOj6q/m0/cX7F9hGXALgwDB+P2vwAAAP//R78PGw==") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x0, 0x0, 0x2080, 0x6ae0}) chroot(&(0x7f00000001c0)='./file0/../file0\x00') creat(&(0x7f0000000200)='./file0/../file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc240, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x6) 11.352341869s ago: executing program 0 (id=187): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 10.370794263s ago: executing program 3 (id=190): syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f00000002c0)={[{@nospace_cache}, {@nodatacow}, {@nossd_spread}, {@nossd_spread}, {@nobarrier}, {@nospace_cache}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x5100, &(0x7f0000005180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 9.954758323s ago: executing program 0 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 9.259682619s ago: executing program 2 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0}}, 0x0) 8.838912215s ago: executing program 2 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x101, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendmmsg$inet(r0, &(0x7f0000007c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="e4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000009c0)="3bab33294bc16132b513d031e788abbfd2f3d8a4e29ed27eb30489431675a51fe2dc1ba1ce3bf78ce70c961c1b4bcfe0c984b18926b60dc64a4d634dc90af49dfeae1a4deac81b534d6a9d4ac599042a7cdc8043b9c1a7373977638569d3a3843fef7643870e8d45e9975e5046ff613a411edcf4267656db226b828775e72e4eb92b196e1cf22de2b5b6c40f8ff91e62cda2d2f5ae64fcd69651c8e2fe99beea756e2c1154610a4dbf11cae4dec58ade7b9a3fecbf53249021fba067745042c30f945bc1074c86d0e1d8d226df5d1fe2a4cd2a8734bf3a5788399779abdfbc58dc48e80997d1ec42115f1d9e223e215319047aab7f70b133046d042f12aa167c8aabe2b8c3143b085e9007b42e0825f0f38d3a2d6de304080e9cb45a7c9cc7357157c27841975589d11d98c97ca77e3f19721ee4e433d70dd67dda92f4665c4b733bb6efa368edc480a5f937a8a575fac6cf9bc33f97763f629dbbf1ac3435d05264bf1463d4d7ed56b18dd2d3400fced409359fad88b82e6ef4a1b46a37aa901ccb481d0103abc2bb37417c67ce8fdbfe33f2dc2f16c528480fcd512d4b3707e7c352de399a94d64acf684e8d6ea169d8aa974ce3bd1b67d75ab97f409f120b7d58c429a8a805fcc0ef62ae1e4fe8f2249f8ab1e137826c0661fab9b9ba7fd997910139c4da27269385224ce1a73f928910bf1c780324daa09717bbf9654a6cb76f66a1a87b160ffd5bdd27d396b20bc88861a3e0c7296da67403dc44da72640ad563a74f7e1244b9c5ae8811b7eaf5afe84ae5d1ae3ed6764ba4ac7d49000cec92ac917aefb7049e8aadc5bd4a215bb335bea1002c2a8b978a32d59bc62ab0a6faf9e785a1ca2b5332cea37957f308c32b08a1b336528af1dff5a447795ff2aaefab03dba4149f3b0410bdff39177415ce546ed40fc9f60f1e850b875c6c8d8a1980dca54b6a1392e55992ea3275b3e467070ba0e0d1cd4ead55d12230f3e1584eee1f5b710305ff36aaff7fa1da532a594deba0ff8428684377d8964c9da21d3e0da7a30e193722cb708ab2d71c4d7c6a87af9ec1b0be785c6720e59f92b501b521137d8351e4eb6b7cf6808344c606f75b25f4cc0b370b9ec25177165ac1a0244969f067980b45799be23a63bd1731355d986789d59a7d503e5a68cd0fc73d98f2e1b6bef0503593e9c7ea9f9d1910673d2b012b23bc71a3bac070d3c6ab0795ee82b63c35891b9f3e60dec0b61e3ee02767ca8aaad9c8078c4b3f418c655f85a4493908bf24a88aa9724cc6b87964c9d48f36b2b1eb1c169605235b858bafcbbdf8d7c1d44a9b09562eb0fc56335c25ddc0741b8bccb04ed606c72002c818a37b6bdf77ce277fdc7f291131ffc7ea8eee9ba713a071f9a1ea14372932f61e72774fee4cc23f60a9bfdea625289bd5101a3dbe69376246f01c9dd6eadf0311ce48c0493398fa8ee1abf48f86086b5f980205d199eb283ea5ebbc96928fc11fcb2104cefac8cc276e4de0a05f087f612bd52ba072d49f6c4032549dba3d54a9336e22738fb0691fa09c1f02a86099d8fdb46ae5db9891e74d4ee32c350b55887708e5a6183b20174eca8d5722df8f346939cf4ae0a9dbfe1f7c833b5125c0f4a28877e5dcce639e768f9e022a373c4eaa6b75f877de366f4c3627bb4cd2a40b105a4f7eeeb65075cadb534f44b738c06e6dbd24024d6cd5cddef1f4dbadfc2d560d62613e47deff7ff2505dbb28c5f320442ea13202bf077580c7a27123a9b79591c940bcb2dc750a5ee94e4e9d48c473e14b5eb842d15ee6b4463a13b2b2b556ecc089297cca48a08207cf4b9ec36b18d9e9a01a01e6a8e3b3cd24826761ba4db75d77d59fea5ee9a46a5e70e5b91b6db6c2045223310f9e46e32d3e0226bd6ed27939baa9f76addcbe52cb907b9be30e20ce3244d28c587c182be945d614ffa1132ee36bf83fd6443cf6671fc124ce49cfdb1b24f46bfd9a041a3b1e47fb37dd22937e2ebef549902b7e7f86856f5513bef00bb764cb3ddd1f86c12f175d4408c2133e8c814c9591320c65866e30b493c5c7aa2aa28f32f8a4c2716f0beceaef023f9598b680b142ebdb2aafaecdc55bed7ec0c170fe58cca3292ea21884b976a7e376156aa4ab0e7cd8d5aeb88738c24c87cf2a7cff20c0f8145d3d94d13826bb90d3203dedab414644390460fd8921660db14f52d191fa64a27d213b667e683b9606f4180c3270cc4ff234a52efa9e95f711847998b48fddc949067042c92bca50ec69284dace7ded0855dad836d8ac91e2711defe7877ba1cf0cbd188707f02c3f7b1fdb09717b5009c700bcfa51ffe3ccd95ffe28e820da62f5331bdd6ee96bf87a7e77b40cba41a1ac3045aa89a9739b0b81582f87ee9f71244c12896473ae7eb02496ec4ffdd3a0ccabca7288aa71fdcb7aaf61183d4056d1aeef5a132ee374b6c2c277bdbce26e06a52427077d3a03a33589878897690ed76bee8f65cca3b4bb6fb686752acc5cc9266f32b60d62f61597c6f780d7a31960fef799cddba3b633421d99ce5f5fc6fd0c9abc81408fbb5a9ed8abb9a6083ff08d7465e5f5789e23f3f5ac0b700305509707d6ab1525ec632f49f644efae3623cd01e78172291b24f4bda3e9324c2a31d82c770ddd1b5e5197f06a8f15b800ba078f2e229835ba5e3b65906a8e4aec6dcf283161f091474062c7bfbc3ea0d27028ba0ab2af77b86bc3bde7cd527e4b48af4e889431edbd1bab8d16faefe77fa3d3edb47d02e22d4402ec36fb6c1a5879dd0a426c7056d3ccd9ea1dadd2bc68fd2efac483bb98a8bd4f7714a5e8a3b152e3fbd4f711e095c4fc819b18ff6093528559a2fa31b41def928a2389407f61772e603fca54cc5e2b072294576d96de4e3ffaafbed7404bbe2961200aa19efb80440a40d5295646615b364d241a8675b7bbda48aca439e946c2aaecda7659b33add69c924bde284b633d881773d02ee26d9e39f402a4c86430e79f9dd117d0822ab408e0c49ef1cc3f3e6c9b36b7820047fecafe2c6eb4d613072a57ef3594847c9df224583744ab08b558437b4b61d0024360eb41b510089c125efcb813ec41dc31863f311208fff044f06e5a9e60fb24cdbe145393fb3509f855c93e7f73d5a7b09c6600ee4544a34ea74b19c3c26159265123299b0d2f2a8e35b98fddb8368ba284cc467877207bb775f347f4a99e46ec169bd62095a143cb18e565aa10dc4982fe34b6dccc09f48c2111129b1a3ae89b8c4b379d37d83c1f372912a0d638a18b1835a30d50cc56e8b7a5d4af770a96f9e1e6eb89e0c0923d3f30907888c1bdce3e2c6e7a8dd1ed04a33844385311e286cce95c7719df36cba4eac449acc14960b99ada320621e0905f9d1802bdd0719440e69b000225fe08db4291232752c9e3b6eef728245ec3adb2b4c87334ad6bb2fc517bd22973da53860f43bba07b408fae224d907b52fd2b769de79b861921fab99d61d2d4483bda8393931d418e8dfc3e9bf6097914b410a14724be8b244e9aa2c5e96c84390afc45403fc89aaf63dc3c702c4e0f135b9679f9a39d04cac23c4dbfc3b1ff335c5a345b2b3ca924833f7559aab202506a252ac7d3ed945e0b24cace52e9b11c38c7ebd7e2c822b81b9cb24350a4c9f566ddfa1444d930b9185dd353ff3d8925b3d82306201fc4a53a443962f4e4d62098abfebf26a9bdb12757edd137b05986fa8f4d47303a5fc5f7f67362362269ca4160012bb4323e80b0f45ca71eeeede8c802a0f9a707cab2211591938bff6627e952db2cfaf88e93106e6e813285bc8089727b6a2a63a6d273f845382fa42d8cb1627b09ef629e1e098a83b0d71604ac3a8cc957b5b82da0cd2adb8e3c63af0386a865ba5b252d898d58ea6afaaaef9c1bee78808cb942f7c240cefb0d2e079cfe534fc09b9198ace2d4c77e254c469b35aa93221d8fdee0fc487b8ec1dca1ff785cb89ee98c27dde24143c8fda5f71c58cffe594757b34c0e978adbbca82e545ad002f5aba5398bde7cbfebde6dc3f473ac8789f20d1fbc5bad2a19cc765e04dd39db7b0ad9ae1b8150e01f938a9629eba19154593775f744258ca4bdf3ba4e032ba06fd25a7538617431ab0f6dfa95e9889923dc9a6ad01bd93a0fb46fab34c17fa885a92e0261ac02fc8d1d6ccff85528837b9583ca4c614e8add0bb06799953caabf928d75896930e1a1bf39736458564d4f439c33d77eb3155de2dd47f54c8a29d15a6398af451e11668e4e899d1c61fb06ed7277e76d3437d1831f09b339dea330f3c156aebace924add26a1d1e08462837c4c0ce93c9107151e909f43c6ac487acda398f0dbb5e5ed61a624edca0be05bac2b1ab5da20dd39d276caab2cfa171317c28c01d6b16d643840d13950a02032be3644ad680aecdc29dd812f8afd963b1706c7d1f8995cedcbcba9ba5f1184f6a7b40e314af6aa9ac1a5eaf04f16796541fd85712c0ef3df8e6f0fe305eef38338050290c523c7924fd9536173d3acedfd0d43733def3d293d4d856f1cf485d8956dd34cb5e575f161f39d58a453e7ba254344e1944f2fc28d55375228e273daf9e2537d7fdca317c428f3c4d46971f171722ce4dbdb6a343cc0c60ff7fd83d0d91515b9b4d6a19d65f46672eff78ee5ff6c159855dbc56a674faf8325a538cd94aaa3caa70006b1eefaa353346b8e51f60a5a1663b051de3b234cc9c08003fe32fb44662ba734224100b9ab963fc63b70d9b4980eb48bd7e4c202e689957a93dc6aca4e4295ac6a923fdddf8ca060bbd446e337723f8902286078b6da1e1fb3baf5e7c42a64282eca7dcb220717a07e82df81f0828ecfa840b8b233b04d7fb0ccf5399418a6eaa087bcc36ab318d4af286180d10d750f960013cdd70e0b5daeeb1cb9af2057f8f99f8b426298e86f80a24389549da5f5097c082d890a35b840f1ab4a891710f3ddb637933a7dc94256256f2ab4e1b187a285cebeed5d6d8d4e9bdc5238be05db2e93e805978fa0732cfedb86c1ccb153cefa35fccb9b73732479c9a876d6e0b8c12acee944bfc064db5b0a340d0b98b1b5fb526f0bb981aac1ee29e1d8c9790e34ab73289953fa515e61db9a99743d1dc260daadd61d8146a3bde8b111dc46961ef6ee754cb53cd67e652319850ce4e089913411ce53ff23ecf7d1201fc87944a7a2b7b43f631298ed5743e6b37a104199d4ef6b852df7635c999d855c115fc8a21f0b63ef2dc750977348f71055861b12e158e6240ae34b92e57d0ee8ebfa513973913358c4a43674a5b2eeb2487d35c4c54935a1742def0734b084c45b4830b6bf56f87c9f73aafa3e871c66980af0723cc62aa929714c7a6b280fefe8b953d77be93032b0fa4b8a4bef4f8027eb3f086c2947228c1589089ad2283cb742a2c5c2979e911f733da877bebb4cc5f6a336265221022733ab5ecdae77b3e9aeb075deff2733652b831c440b1ecda433ad4b0571832086d7cb3a7387955f6025ca83b6d74d9dcd9c77461fd37106fd91a10d6e9661aaf1fe0a6b2908fdc0850396cf8434875629d24129f751e793c01a578fdaff8184cf6710dbe8abba126aae3292aa8e9af1c4e432d4264e259410ad27ad6421e1fd74a86b2cf24d9739b601f0ad42cf3872c47b9f1fe9c8a4811874fc79a9fc480d66e467e16a8d77191660ac0042806b4cb9149c61e6c6a107532ae0717f619ab8ba0f3477ef782b351d72ab783f0020edb20e1074ebec091d64e84f63fb49b04e3e1ea92697058e6fe820e4de93be9be01aeb963b5c1436b5d2ac5", 0x1000}], 0x1}}], 0x2, 0x0) 8.216015618s ago: executing program 2 (id=196): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x541b, 0x0) syz_usb_connect(0x1, 0x1e2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x182e01) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x3, 0x14a042) write$hidraw(r2, &(0x7f0000000bc0), 0x73336958c4e6a83a) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) ioctl$HIDIOCGRDESC(r1, 0x401c5820, &(0x7f0000000040)) syz_usb_connect(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e400102030309"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000200)=""/128, 0x80) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) ioctl$HIDIOCGRDESC(r4, 0x401c5820, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x2300c0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x0, 0x800}) syz_open_dev$char_usb(0xc, 0xb4, 0x20) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 7.228081937s ago: executing program 1 (id=198): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$reject(0x2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x80}, 0x0) iopl(0x3) 7.11066898s ago: executing program 4 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x2020) readv(r4, &(0x7f0000000180), 0x0) setxattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='trusted.syz\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pipe2(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000740)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}}, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 5.856648168s ago: executing program 4 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) 5.515517189s ago: executing program 3 (id=201): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 5.310950294s ago: executing program 4 (id=202): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x10, &(0x7f0000000140)={r0, 0x5, 0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.910778189s ago: executing program 4 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 4.689919996s ago: executing program 4 (id=204): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56b, &(0x7f0000000640)="$eJzs3c1rXWkdB/Dfc5Kb3GTa9E47tlMd5cKIU0aseek4UzKMdiYGhMGByWSEWRmbpA3NS0ky0g4igyC4ELcuxcWgKIgLV4IL9Q9wLYK4UNfpqguxlXNy7lsaTZybm5f284H2nnvu77wuAt/nOed5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIeP2r10bH0lGfBQAAANBLX595e3Rc/gcAAIDH2jv6/wEAAAAAAADgpEuRxUuR4uV/b6VTxfdt1TeXVt+/Mzs1vftmQ6nYsq+oz/9Vx8Ynrrz0pZdfaXz+7+0P2sV4a+ada/U31lZury9sbCzM12dXl66vzS/sew/dbr/Ti8UNqK/cen9+cXGjPn55ouPnO7V/Dj51vjb5yrtTM43a2anp6Zm2mv7Kxz76IzzhAQAA8GQbiCy+ESl+eu9X6XREZNF9Ft6j7aDXhqKW5+/iImanposLWV6aW93Mf0yNIFzrzMQDjYx8CFm8K7WIs/m5Dkj0AAAA7F8lsvhMpLj4YCuNRERfIwd/vhgYcO8d1A7hJHfRHxHnIuJSnIDMDgAAAEdsMLJ4O1L8brkWZ8pcXeT/r0RMHvXJAQAAAAeiP7JYiRQvvLaVasXzABHx4uzUdP3Nd+tfW11ca6tNqexRP+nvBxwmzyYAAABwDFQji9NFj/9WevqoTwYAAADoiaHI4nOR4sf/+nYxrlwU49Kfmbw68tRI+whzF/bYT157OSI+tc938iuNsQbzbbODvSYAAACgUzVl8fdIcf/P1eL7pcY7AH97+PDhUZ8cAAAAcDBSFrVI8cMfbRVT47XPS9/XNr9/00l/97+35z9UfWPt9t31pRs3N3f9fbh67Vsbm+tz13f/eXvuwo7HIfaaxxAAAAD2oZKy+EekeP7Mz5u5s5wDoH9n7UevtrJptcyfzRhatBuMFO0GzXcITo+/0L68a2T9P8bHq5bH7evukgEAAOCJk1IWA5His394tpz7fzge6YMu6/4UKV5de66sywbyukYjQa34v7q4tLwwmtdORYrfLDdqo6gdLGvPtWrH8trf5/ud66ytlrXPtGrH89oHkeLm+u61n2jVTuS165Hilz+pN2qH89pTZe35Vu3l62vL8z27wQAAAHAMVFIWX4wUr/2xnhpZvrP/v9Xb/tF3Wv39H+7c0X/p8++2/7/Wtu7Dsh1isGyv6N+jveKtSHHx6eca11O0FTQeK9ie66DVXnEvUqy/11k7UNaebdWO7fvGAgAAwDGS5//JSDF487fNR+7LDFx+3T3/f3Ln2wE9yv/tcxLmx9y4+8GtueXlhXULFixYaC50/7cQAAAed3n+/36kuDX6l2Z/d5n/y0flW/n//ndb+X9y5456lP/Ptq2bLMcbqPRHVDdXblcuRFQ37n7whaWVuRsLNxZWr4yPXr06NjoxcaUy0Ojcby11fa8AAADgpMrz/3uR4gfP/qL5fv5++v+Hd+6oR/n/XNu6/JitTr+uLx0AAACeGHn+/1mkuLP66+Y4ep35v5Xa8/zfeM/+0vPbn83WgR7l/2fa1tXK4w4dzKUDAAAAAAAAAAAAAAAAAADAsVFJWfw1Unzv9f5UDvi/r/H/5nfuqEfv/59vWzcfhzP/X9c3FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6oLLJYihSfvrCVvpyv+GbEqfZPAAAA4MT7TwAAAP//onwchQ==") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_SPECULATION_CTRL(0x3, 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) fchownat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, r0, 0x100) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {}, {0x6}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1817733617c840bfc40ddd72a36c8060ca0000ac00000000000000070000001813", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff850000007d000000185b0000010000000000000000000000bf91000000000000b70200006fc51e648500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xeb, &(0x7f0000000140)=""/235, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x9, 0xffff010f}, 0x10, 0x1fd5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x90) 4.373719862s ago: executing program 3 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x40}}, 0x0) 4.018900967s ago: executing program 3 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x101, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendmmsg$inet(r0, &(0x7f0000007c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="e4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000009c0)="3bab33294bc16132b513d031e788abbfd2f3d8a4e29ed27eb30489431675a51fe2dc1ba1ce3bf78ce70c961c1b4bcfe0c984b18926b60dc64a4d634dc90af49dfeae1a4deac81b534d6a9d4ac599042a7cdc8043b9c1a7373977638569d3a3843fef7643870e8d45e9975e5046ff613a411edcf4267656db226b828775e72e4eb92b196e1cf22de2b5b6c40f8ff91e62cda2d2f5ae64fcd69651c8e2fe99beea756e2c1154610a4dbf11cae4dec58ade7b9a3fecbf53249021fba067745042c30f945bc1074c86d0e1d8d226df5d1fe2a4cd2a8734bf3a5788399779abdfbc58dc48e80997d1ec42115f1d9e223e215319047aab7f70b133046d042f12aa167c8aabe2b8c3143b085e9007b42e0825f0f38d3a2d6de304080e9cb45a7c9cc7357157c27841975589d11d98c97ca77e3f19721ee4e433d70dd67dda92f4665c4b733bb6efa368edc480a5f937a8a575fac6cf9bc33f97763f629dbbf1ac3435d05264bf1463d4d7ed56b18dd2d3400fced409359fad88b82e6ef4a1b46a37aa901ccb481d0103abc2bb37417c67ce8fdbfe33f2dc2f16c528480fcd512d4b3707e7c352de399a94d64acf684e8d6ea169d8aa974ce3bd1b67d75ab97f409f120b7d58c429a8a805fcc0ef62ae1e4fe8f2249f8ab1e137826c0661fab9b9ba7fd997910139c4da27269385224ce1a73f928910bf1c780324daa09717bbf9654a6cb76f66a1a87b160ffd5bdd27d396b20bc88861a3e0c7296da67403dc44da72640ad563a74f7e1244b9c5ae8811b7eaf5afe84ae5d1ae3ed6764ba4ac7d49000cec92ac917aefb7049e8aadc5bd4a215bb335bea1002c2a8b978a32d59bc62ab0a6faf9e785a1ca2b5332cea37957f308c32b08a1b336528af1dff5a447795ff2aaefab03dba4149f3b0410bdff39177415ce546ed40fc9f60f1e850b875c6c8d8a1980dca54b6a1392e55992ea3275b3e467070ba0e0d1cd4ead55d12230f3e1584eee1f5b710305ff36aaff7fa1da532a594deba0ff8428684377d8964c9da21d3e0da7a30e193722cb708ab2d71c4d7c6a87af9ec1b0be785c6720e59f92b501b521137d8351e4eb6b7cf6808344c606f75b25f4cc0b370b9ec25177165ac1a0244969f067980b45799be23a63bd1731355d986789d59a7d503e5a68cd0fc73d98f2e1b6bef0503593e9c7ea9f9d1910673d2b012b23bc71a3bac070d3c6ab0795ee82b63c35891b9f3e60dec0b61e3ee02767ca8aaad9c8078c4b3f418c655f85a4493908bf24a88aa9724cc6b87964c9d48f36b2b1eb1c169605235b858bafcbbdf8d7c1d44a9b09562eb0fc56335c25ddc0741b8bccb04ed606c72002c818a37b6bdf77ce277fdc7f291131ffc7ea8eee9ba713a071f9a1ea14372932f61e72774fee4cc23f60a9bfdea625289bd5101a3dbe69376246f01c9dd6eadf0311ce48c0493398fa8ee1abf48f86086b5f980205d199eb283ea5ebbc96928fc11fcb2104cefac8cc276e4de0a05f087f612bd52ba072d49f6c4032549dba3d54a9336e22738fb0691fa09c1f02a86099d8fdb46ae5db9891e74d4ee32c350b55887708e5a6183b20174eca8d5722df8f346939cf4ae0a9dbfe1f7c833b5125c0f4a28877e5dcce639e768f9e022a373c4eaa6b75f877de366f4c3627bb4cd2a40b105a4f7eeeb65075cadb534f44b738c06e6dbd24024d6cd5cddef1f4dbadfc2d560d62613e47deff7ff2505dbb28c5f320442ea13202bf077580c7a27123a9b79591c940bcb2dc750a5ee94e4e9d48c473e14b5eb842d15ee6b4463a13b2b2b556ecc089297cca48a08207cf4b9ec36b18d9e9a01a01e6a8e3b3cd24826761ba4db75d77d59fea5ee9a46a5e70e5b91b6db6c2045223310f9e46e32d3e0226bd6ed27939baa9f76addcbe52cb907b9be30e20ce3244d28c587c182be945d614ffa1132ee36bf83fd6443cf6671fc124ce49cfdb1b24f46bfd9a041a3b1e47fb37dd22937e2ebef549902b7e7f86856f5513bef00bb764cb3ddd1f86c12f175d4408c2133e8c814c9591320c65866e30b493c5c7aa2aa28f32f8a4c2716f0beceaef023f9598b680b142ebdb2aafaecdc55bed7ec0c170fe58cca3292ea21884b976a7e376156aa4ab0e7cd8d5aeb88738c24c87cf2a7cff20c0f8145d3d94d13826bb90d3203dedab414644390460fd8921660db14f52d191fa64a27d213b667e683b9606f4180c3270cc4ff234a52efa9e95f711847998b48fddc949067042c92bca50ec69284dace7ded0855dad836d8ac91e2711defe7877ba1cf0cbd188707f02c3f7b1fdb09717b5009c700bcfa51ffe3ccd95ffe28e820da62f5331bdd6ee96bf87a7e77b40cba41a1ac3045aa89a9739b0b81582f87ee9f71244c12896473ae7eb02496ec4ffdd3a0ccabca7288aa71fdcb7aaf61183d4056d1aeef5a132ee374b6c2c277bdbce26e06a52427077d3a03a33589878897690ed76bee8f65cca3b4bb6fb686752acc5cc9266f32b60d62f61597c6f780d7a31960fef799cddba3b633421d99ce5f5fc6fd0c9abc81408fbb5a9ed8abb9a6083ff08d7465e5f5789e23f3f5ac0b700305509707d6ab1525ec632f49f644efae3623cd01e78172291b24f4bda3e9324c2a31d82c770ddd1b5e5197f06a8f15b800ba078f2e229835ba5e3b65906a8e4aec6dcf283161f091474062c7bfbc3ea0d27028ba0ab2af77b86bc3bde7cd527e4b48af4e889431edbd1bab8d16faefe77fa3d3edb47d02e22d4402ec36fb6c1a5879dd0a426c7056d3ccd9ea1dadd2bc68fd2efac483bb98a8bd4f7714a5e8a3b152e3fbd4f711e095c4fc819b18ff6093528559a2fa31b41def928a2389407f61772e603fca54cc5e2b072294576d96de4e3ffaafbed7404bbe2961200aa19efb80440a40d5295646615b364d241a8675b7bbda48aca439e946c2aaecda7659b33add69c924bde284b633d881773d02ee26d9e39f402a4c86430e79f9dd117d0822ab408e0c49ef1cc3f3e6c9b36b7820047fecafe2c6eb4d613072a57ef3594847c9df224583744ab08b558437b4b61d0024360eb41b510089c125efcb813ec41dc31863f311208fff044f06e5a9e60fb24cdbe145393fb3509f855c93e7f73d5a7b09c6600ee4544a34ea74b19c3c26159265123299b0d2f2a8e35b98fddb8368ba284cc467877207bb775f347f4a99e46ec169bd62095a143cb18e565aa10dc4982fe34b6dccc09f48c2111129b1a3ae89b8c4b379d37d83c1f372912a0d638a18b1835a30d50cc56e8b7a5d4af770a96f9e1e6eb89e0c0923d3f30907888c1bdce3e2c6e7a8dd1ed04a33844385311e286cce95c7719df36cba4eac449acc14960b99ada320621e0905f9d1802bdd0719440e69b000225fe08db4291232752c9e3b6eef728245ec3adb2b4c87334ad6bb2fc517bd22973da53860f43bba07b408fae224d907b52fd2b769de79b861921fab99d61d2d4483bda8393931d418e8dfc3e9bf6097914b410a14724be8b244e9aa2c5e96c84390afc45403fc89aaf63dc3c702c4e0f135b9679f9a39d04cac23c4dbfc3b1ff335c5a345b2b3ca924833f7559aab202506a252ac7d3ed945e0b24cace52e9b11c38c7ebd7e2c822b81b9cb24350a4c9f566ddfa1444d930b9185dd353ff3d8925b3d82306201fc4a53a443962f4e4d62098abfebf26a9bdb12757edd137b05986fa8f4d47303a5fc5f7f67362362269ca4160012bb4323e80b0f45ca71eeeede8c802a0f9a707cab2211591938bff6627e952db2cfaf88e93106e6e813285bc8089727b6a2a63a6d273f845382fa42d8cb1627b09ef629e1e098a83b0d71604ac3a8cc957b5b82da0cd2adb8e3c63af0386a865ba5b252d898d58ea6afaaaef9c1bee78808cb942f7c240cefb0d2e079cfe534fc09b9198ace2d4c77e254c469b35aa93221d8fdee0fc487b8ec1dca1ff785cb89ee98c27dde24143c8fda5f71c58cffe594757b34c0e978adbbca82e545ad002f5aba5398bde7cbfebde6dc3f473ac8789f20d1fbc5bad2a19cc765e04dd39db7b0ad9ae1b8150e01f938a9629eba19154593775f744258ca4bdf3ba4e032ba06fd25a7538617431ab0f6dfa95e9889923dc9a6ad01bd93a0fb46fab34c17fa885a92e0261ac02fc8d1d6ccff85528837b9583ca4c614e8add0bb06799953caabf928d75896930e1a1bf39736458564d4f439c33d77eb3155de2dd47f54c8a29d15a6398af451e11668e4e899d1c61fb06ed7277e76d3437d1831f09b339dea330f3c156aebace924add26a1d1e08462837c4c0ce93c9107151e909f43c6ac487acda398f0dbb5e5ed61a624edca0be05bac2b1ab5da20dd39d276caab2cfa171317c28c01d6b16d643840d13950a02032be3644ad680aecdc29dd812f8afd963b1706c7d1f8995cedcbcba9ba5f1184f6a7b40e314af6aa9ac1a5eaf04f16796541fd85712c0ef3df8e6f0fe305eef38338050290c523c7924fd9536173d3acedfd0d43733def3d293d4d856f1cf485d8956dd34cb5e575f161f39d58a453e7ba254344e1944f2fc28d55375228e273daf9e2537d7fdca317c428f3c4d46971f171722ce4dbdb6a343cc0c60ff7fd83d0d91515b9b4d6a19d65f46672eff78ee5ff6c159855dbc56a674faf8325a538cd94aaa3caa70006b1eefaa353346b8e51f60a5a1663b051de3b234cc9c08003fe32fb44662ba734224100b9ab963fc63b70d9b4980eb48bd7e4c202e689957a93dc6aca4e4295ac6a923fdddf8ca060bbd446e337723f8902286078b6da1e1fb3baf5e7c42a64282eca7dcb220717a07e82df81f0828ecfa840b8b233b04d7fb0ccf5399418a6eaa087bcc36ab318d4af286180d10d750f960013cdd70e0b5daeeb1cb9af2057f8f99f8b426298e86f80a24389549da5f5097c082d890a35b840f1ab4a891710f3ddb637933a7dc94256256f2ab4e1b187a285cebeed5d6d8d4e9bdc5238be05db2e93e805978fa0732cfedb86c1ccb153cefa35fccb9b73732479c9a876d6e0b8c12acee944bfc064db5b0a340d0b98b1b5fb526f0bb981aac1ee29e1d8c9790e34ab73289953fa515e61db9a99743d1dc260daadd61d8146a3bde8b111dc46961ef6ee754cb53cd67e652319850ce4e089913411ce53ff23ecf7d1201fc87944a7a2b7b43f631298ed5743e6b37a104199d4ef6b852df7635c999d855c115fc8a21f0b63ef2dc750977348f71055861b12e158e6240ae34b92e57d0ee8ebfa513973913358c4a43674a5b2eeb2487d35c4c54935a1742def0734b084c45b4830b6bf56f87c9f73aafa3e871c66980af0723cc62aa929714c7a6b280fefe8b953d77be93032b0fa4b8a4bef4f8027eb3f086c2947228c1589089ad2283cb742a2c5c2979e911f733da877bebb4cc5f6a336265221022733ab5ecdae77b3e9aeb075deff2733652b831c440b1ecda433ad4b0571832086d7cb3a7387955f6025ca83b6d74d9dcd9c77461fd37106fd91a10d6e9661aaf1fe0a6b2908fdc0850396cf8434875629d24129f751e793c01a578fdaff8184cf6710dbe8abba126aae3292aa8e9af1c4e432d4264e259410ad27ad6421e1fd74a86b2cf24d9739b601f0ad42cf3872c47b9f1fe9c8a4811874fc79a9fc480d66e467e16a8d77191660ac0042806b4cb9149c61e6c6a107532ae0717f619ab8ba0f3477ef782b351d72ab783f0020edb20e1074ebec091d64e84f63fb49b04e3e1ea92697058e6fe820e4de93be9be01aeb963b5c1436b5d2ac5", 0x1000}], 0x1}}], 0x2, 0x0) 3.938138148s ago: executing program 1 (id=207): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x8, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}, @main=@item_012={0x2, 0x0, 0x0, "1a79"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x81044804, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.799149527s ago: executing program 3 (id=208): ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[], 0x1, 0x5b30, &(0x7f0000005b80)="$eJzs3Q2MXWWdMPBz7p1p73TaMkWBWj46QOlbeAWmFF+gwTjwRsDVIoIWFaStdFoG+wGd1kIVW0hEgyzbZDfKmkgI0YQNIbhL1vVjTTGLmJU1NnHZ4u66GNCs7AZrELRribOZuefczj1znnvu3HuntPD7hc6Zc+a5/+f/P/eZM+c893BvBAAAwJvCU58d+d2VC979w7uGXt15xbc33hn1lse3V9IGfcnyttcrQw6nmV3zx5fZcbF7cMZT77r3fc9+5WNfe/6FeUuWfvXmyw7eOnvFPfcM/uSCgz/64x1FcdPxdOah9filOIpO/vGSL979/adPGNsWR1FUjvt2RdG8uPS9eXH62NHR0dH0+7W1POvjP/7qsnVjy11fmFm3/ZhMHsb7m1slGWef++7mk351zmXP7vnppa8OVP6wZdehJnFlwniKormrJz6+O4qinuTfmHS0zU8fnCyviqJo1oTHXViQ12lN5n92YH1BspyRLHsL4qQ/PzWz3t1kHl2ZZaXJx7WqNM3xU+nzN3ua+48D29N+5iXLbyTLM6cYv5z+i6NSHHXVutsQ1z/HlVo+8fj2Q+ulunZxZmzEURRn1kuZ9XJ3pq7xsZkMtHIc129P22W29yfbu5LtpxaMtWsC29+W1pv8oh7I1J8N2jvpm1pd49K8ft4gl8OhNOEYlLc9zbeSPBm9ybbe+NhJjxnNkf5s5Qv3Pfb8jgcW9QXyiL8eJ/HjluI/s/GifYt3/Gz//FD81aUkfqml+CPnvPzoi1f/4IRg/N1p/HJL8Z87f/GXvrNz+4Hg/vlNun+6WopfXn7WwaV3DawM5v9gGr/SUvyHLn3ky3Pf8eSjwfwH0v3T09r+Gd722nUPH7c/GD9K489qKf4lrxx/xvLNj6wPxn8i3T+9LcV/emR4xd03LdzeH4q/N40/p6X4p/3i+uv27Bt6Lpj/YLp/+lqK/85Fl1y1Yv+me0PHznjX4foLC/DG9JbkHOvzyXqr15ntmnC9cH9fXD3nm538m9PJjjLG+pk7jfEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHN6qG/t0B+/dcprXcn6zOSbU8rVZbp9RhTFPVEUjWxds2Xr8Kb1/Tdv3rZl05oN/Wu29g9t2rrl9v7z396/ZeiWDWtuH/vpwNnLqo87Noqry/jkSX2Pjo6Olvrqt6X9feKCP3+8/5R9/xpFA8f95JSuYP7vv2PB/5+X8zUjHhzd8Gdn3PDi7H/cVt3Ql+TVF8grCuR18cMvLf/Vt3v+NIoGjm+U138uufz7dQmNbzgUJ1GaGZXGv5kZz8rNo5Z1kk+6v7rWDW8YGijev+VAHb888Dcf2j5y467q/q0E62hy//YMjv5+0zefuPHiHVdVNxypz3vR/k6rSPNL918l2d9zk7rmBurqCtR19xmn/se//OXGl3ZFA12/XTi576K6upMB0B2/ral+0x5mxfX7pJK0T5/x9HHnbt14y7kjt+84e3jjmvVD64c2LVu27MLzl513wXn/79zx0qtfO1Z/2v//abL+wzOeNl8wOJx+bW48FeVVtD/G8ireHxMzCv3+vfWDl//bnX+7++rqhqJxnrauHU+S5ayxp3lpNGG8Td5XeXUV7YfuwH5Yf03vX73Sv/l/io5DE5+ZiV8z4sHR3w7/07tm7zn9huqGw3Kcn5hQi8f5WtZJPt0TjztLj9z9OzMqJ3X15uZ1+l0vf/ifvxX31/KbMSO6bc3WrVuWVr8eprrees2nO1vXhYv/+9Ydq++cN6mu86pfZyeZzo5PzM0ruzWta+H413KU7JZ0EVVK+fV1R9X8sn8X0sdl92pv8rPe+NjcurLSn6184b7Hnt/xwKLQno6/Xu2xJ5pTXcYnBVpuyDywXEs4r/+i8RFF0eqJ29L9+MQ3/6J/zw/nbSwcH9WRMelrtrzB0c9cNPuXI9fuXVHdcHiOKxMSavG4Usv6UD7j+2v8uHLekVPH6/c81/1ixYOje056+/plf781+bUv2r+11nn7d1kUFR0HFmbWp+s4kO3nUPv8eP2Z9d6o3NJx47nzF3/pOzu3HwgeN37T7HHj03Vr5TaPG3FgPO37zF///lP7nnlP544b71lc/ui/L1yW7NAj5fetkozrSmBc17JO8oknjutzbty8YW11+5F7/pssw9c/cdeE86yR23d8Ys2GDUNbRpqrq9nzkrSu7F4eq6jUwnlJ+tt3bMF1Xfp8Hapr+r5pZn81+/uW5r82u79a/H2DPL1R3NLfs2c2XrRv8Y6f7e8LxI1Xl5L4pZbij5zz8qMvXv2DE4Lxd6fxu1qKX15+1sGldw2sDMZ/ME7iV1qK/9Clj3x57juefDQYfyDNv6e184nhba9d9/Bx4f0fpfF7W4r/9MjwirtvWrg9GH9vnPQzdm4XRY+/umxddT2OupPjcJpHd11eUXY9zqyXMuvlieul6hx8rYNyHNdvT9sl20+dkEueawPb07PHyvzq8kC6HmW/abz9SFOacE6Qt73o/BoA3kjS1//Tc4309f+FyR/ECa//V5fxjLrHz0/Op+Yf2jR+nXdnf/UP6VTn9dI8svN6afwlp9fHaHVer2he7rTMejWvnmQerauWT4PzhtlRE/Nyk/tpPC+XKb943qz/85kNXeNze6HnrTuZqch7nTmT7+yxCO2eZ8/Pz7p2nh0ad9n5jvR1+rjJcZe9LyIdd9n7ItL4CzITaK3eF9HauItq4y6d1mgw7sYrK55PnTwuogb79dC4yI+WHRdTGEd91XE0va9LHf3X+9M7/24+IRA/+TtypF/vp9vT40NXk/MAKwPbOzUPkB4u0rx+ntPXjAb5dZp5AAA4dP2f/g0eu/4f+1vdnznPL7puyV5lpPGC97GU8/Mpuv6dfD/brJbO+y555fgzlm9+ZH3wvPiJZu9LuaVubVbBfSlF+3FRZr1wPwZuBSmad1icad8bzWlpP572i+uv27Nv6LngfhysnkgV78fddWtz2tyPSzLrhfuxOz+rov2Y7ado/J6ZWe9N7gia6n5/56JLrlqxf9O9wf2+q9n9/mDdWl/Bfk+u0+PYdXp9fNfpR8R1+nTPR75u8wDJvPV0zQNcE9g+1XmA3knf1Ooa12ge4HBqeh4g8HcBAI5m6fV/7X755Pr/HzLt2r0+DJ63DXbmftbgeVvtvLa98/Jg/rXz8vZevwzGr10XtXfdEtw/teuW9q67gvFr113tzdME988T6f5p77w/9L8LpOf9R/910fTOM7xJr4u6I9dFAAAcRdLr//R0Nb3//8lkPXtuPP3XudN9HTrd19HTPc8w3fMkR/t17tE+zzDd82zmAbw+Wsw8AADAG8O7k+UNTbbvGr+HOIo+fuNN561aO/TJVeu2DA2N3LLmxqFVw5uGt9badY9feU2+TzrUX9F90nntZzVovyoYvz6fywLtQ9qtP9RfUf157RvVvzoYvz6fywPtQ9qtP9RfUf157RvVvyYYvz6fKwLtQ9qtP9RfUf157RvV//Fg/Pp83hNoH9Ju/aH+iurPa9+o/huD8evz+ZNA+5B26w/1V1T/ePsZUU78/PbZ98sM1f/eQPuQdusP9VdUf177RvUPBePX5/O+QPuQdusP9VdUf177RvWvC8avz2dFoH1ITv1pBk3VH+qvqP689o3qXx+MX5/PlYH2Ie0+/6H+iurPa9+o/puC8evzeX+gfUi79Yf6K6o/r32j+oeD8evzuSrQPqTd+kP9FdWf175R/TcH49fn84FA+5B26w/1V1R/XvtG9X8iGL8+n6sD7UParT/UX1H9ee0b1b8hGL8+n2sC7UParT/UX1H9ee0b1b8xGL8+nw8G2oe0W3+ov6L689o3qn9TMH59Ph8KtA9pt/5Qf0X157VvVP/mYPz6fFYG2oe0W3+ov6L689o3qv+WYPz6fK4NtA9pt/5Qf0X157VvVP+twfj1+Xw40D6k3fpD/RXVn9e+Uf1bgvHr8/lIoH1Iu/WH+iuqP699o/pHgvHr8/looH1Iu/WH+iuqP699o/q3BuPX53NdoH1Iu/WH+iuqP699o/q3BePX53N9oH1Iu/WH+iuqP699o/o/GYxfn8/HAu1D2q0/1F9R/XntG9W/PRi/Pp8bAu0nSW7Eabf+UH9F9ee1b1T/bcH49fmsCrQPqdW/dcvQ0Kptt6xds3Vo1abNa4dGVm3fMrx161ByotbufYnB+8qS+xK7o66G9S/IrB+TvD/QMYH3B8q2T8OeOP7N5PcHynbbVfA+OUXPV7b/ovcZWpB5R+vQeAs9v0XHg2bHQ1bd70d1kAxvGhnaMvn43dNwf0wcE9H4bXM91WV8fFPts2/XGeimUPP1VBrWk908M7kRcGZ8XFPto8DnwU1V8/XEwXry8pjq59ilYaf0OXaZL5PkvEdrXb3rRsYP0sNrNgzvGJqc/6wjIP/XZz+WJuVR9PzHmTzmJZnMC33eWyDv7d/4r4d+/eu/e28UDRxXPqmt/RcPjq4+cPzHf3zxzHPH8i81zL/WMv1c5YLPP8y2T+vp2rB5ZOv/Xbd526b8V9DS+51LtfVput85qbPc5P3Lofs9pnr/cjzpmyNTs/cvAwAAvFmk//9/er06P5n6npeZImh+Hri9/z86OA+8t7l54OxsRNE8cLZ9Wnaz88C9bc4DZ/sPzdOWGrRv9LpLs/PAHw20n6rmx0l77wMQHCfJnioaJ9n/D79onGTbT3Wc9LQ5TrL9F42TvPaNXp9udpxcG2gf0vx4aO99J4LjYaC58ZD9XM2i8ZBtP9XxUGlzPGT7LxoPee0b3a/T7Hj4YKB9s5ofH+29L0xwfKxubnxkPy+laHxk2091fMRtjo9s/0XjI699o/sZmx0fHwi0TzX//Lf3vj3B5393c89/9nNbip7/bPupPv+lNp//bP9Fz39e+0b3czf7/F8ZaJ+qf/7Hnvjx531o1fbNWybeAz3dn9sS0nx+0/u5Na1qPv/pfd+n6c9/et9Xavrzb++6KZj/3vZe6Wo+/+n9XKJWHbbXY5P/V7Po/aeKXqf9SGD7VF+nnTHpmyOT12kBAABg+qWv/6cfx5++P/wXkmXgY/pbdvR/vrfP386N36HP3y6axzSf16CzI4D5PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM6Y2TV/fPnUZ0d+d+WCd//wrqFXd17x7Y137h6c8dS77n3fs1/52Neef2HekqVfvfmyg7fOXnHPPYM/ueDgj/54R2HgvurizGS1EkXxS3EUnfzjJV+8+/tPnzC2LY6iqBz37YqieXHpe/PiTISBP0RRtLaWZ/0PH3912bqx5a4vzKzbfkwmSLauqLec5lOXZ3RbYUUchSrJOPvcdzef9KtzLnt2z08vfXWg8octuw41iSsTxlMUzV098fHdURT1JP/GpKNtfvrgZHlVFEWzJjzuwoK8Tmsy/7MD6wuS5Yxk2VsQJ/35qZn17ibz6MosK00+rlWlaY6fSp+/2dPcf/bglu1nXrL8RrI8c4rxy+m/OCrFUVetuw3xoTESTXje4igef+4PrZfqxkKcGRtxFMWZ9VJmvdydqWu832SgleO4fnvaLrO9P9nelWw/tWCsXRPY/ra03uQX9UCm/mzQ3knf1Ooal+b18wa5HA6lCcegvO1pvpXkyehNtvXGx056zGiO9GcrX7jvsed3PLCoL5BH/PU4iR+3FP+ZjRftW7zjZ/vnh+KvLiXxSy3FHznn5UdfvPoHJwTj707jl1uK/9z5i7/0nZ3bDwT3z2/S/dPVUvzy8rMOLr1rYGUw/wfT+JWW4j906SNfnvuOJx8N5j+Q7p+e1vbP8LbXrnv4uP3B+FEaf1ZL8S955fgzlm9+ZH0w/hPp/ultKf7TI8Mr7r5p4fb+UPy9afw5LcU/7RfXX7dn39BzwfwH0/3T11L8dy665KoV+zfdGzp2xrsO119YgDemtyTnWJ9P1lu9zmzXhOuF+/vi6jnf7OTfnE52lDHWz9xpjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBvT0OX377x876oruuIoigNtRnOkPyvPGBzsb6Hf8vKzDi69a2DlxG3zW4gDAAAAFEuvw0u1LZVofrQ97olOzG2fzhGcmK7F9duzcwg9h1p2JE6pQ3HKHYrT1aE43R2KM6NDcWZ2KE6lIE4lai5OT8M4pabzmdWhOL0dijO77TjVkTynQ/nM7VCcYzoUp69hnObH4bwOxTm2Q3He0qE4b+1QnOM6FOf4DsU5oUNxsnPKUx2Hc5KWC0Jxxr8pF8bpisu1H+TNp6f9nJw5YJam2E9vk/1k5+yn2k9Pk/2c3mY/lSb7WdxmP3GT/ZzZZj+lgn7ScXtbNr+0n3StePwfGI2i6Pb244wvd3Qozqc6FOfTHYpzR4fifKZDcXa2GQegWen1/6Hrxr5oZtfF0azkiJOdBUivdxdWHz3peFTJXqAn0ngnZbbPKIqXvVDPxFvY4fxOy2zvrovXVTtvahCvb2K8RZkfFtabnVDI5LdkqvGyEwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMI2GLr9/5+V7V10RxdHYf7lGc6Q/K88YHOxvod+VL9z32PM7Hlg0cdvMrhYCAQAAAIXS6/Du2pZKNLPrf9m1vxi5qvoB4OfuzM4M28Jv+gvUgRQ6UloxIi1dlD+p4aIPs8SgBDAaMN0tZVg3bHeR3aawImt9ID5oINHE1SfDE4bwoAZFJVkeNAYlYRPFJoLyIlE0QAIk1MRkzO7cO/86s7OOaBf4fB7Ovfec7znfe2abJt8zszfkolxbXCE5Bygkz5li/RqVh9auI9G2deOzSfze+SN37Z27d+HDU0cOTVYnqzOjo6NXXj66/4r9H917x9R0dV+9Dfk+6w0n683du3Dnoenp6t1z9efO9y4l80rNronV5njy3v/fJ0+UxDfz/Pdu+v+1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9KpWlhYrK+NjI1EIUY+YWhfpWCYXx+UB8l775vbdV88+Otnal88OsBAAAADQV1qHDzd6CiGfzYRMOHft6cJmaDGEZt0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC891QrS4uVlfGxLVEIUY+YWhfpWCYXx+UB8v5mbur6B76w81hrX2md+PwAOQAAAIC6tA4favQUQinsCsPRuW1x6dnAeR3zO+PSdc7fYFzn2UGvuF0bjNuzwbgP9on7VHK9JwAAAMA7X1r/Zxs9xZDPntmz/u9X16dxOzviMsl1kN8KAAAAAP+ZtP7PNXpKIZ8tNer1jdb7F3bEpfP7fW+fzu/3vX0ad3GPPJ3f5wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm1e1srRYWRkfy0QhRD1ial2kY5lcHJcHyPvi5Xu+/fPFYydb+/LZARYCAAAA+krr8GbpXQj57EgYDlvW6v4r9/z9iwsTx7cNF5PhXC7cc2h+/u799TaN2/XV1z/3u59G5VPiLqu3p2VzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA26paWVqsrIyPnRGFEPWIqXWRjmVycVweIO+LU0f/eesj57zW2lcaYB0AAACgv7QOb9b+hVAKuZAL29eeWmv9VUMd83udGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvHnP3Ltx5aHq6evdmusmETfEabty8d29O9/9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAZlGtLC1WVsbHClEIUY+YWhfpWCYXx+UB8j788Ue/e9ZHfvFYa19pgHUAAACA/tI6vFn7F0IpDIfhcM7aU7czgbX6v/g/fEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBTqFaWFisr42NnRiFEPWJqXaRjmVwclwfIe+GfP3/r8onqi619+ewACwEAAAB9pXV4rtFTCPnsZSEfdiTP0+0Tokxy7X4u0Jx3V9u0kQ3Pu69tXmbD877WsbNsspv6vEK6XrF+bcwrnzqvHEIoJfNKzYGJtnnhobZZZ274Pb/XNq/YZ14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATahaWVqsrIyPRVEIUY+YWhfpWCYXx+UB8j535KoTexb++FprX2mAdQAAAID+0jq8WfsXQimcH84K56/V/aHYHp/GHXjklav/+rMzvhHCvu2/vSDbc/2/XFz5ZWcTwlB70FAI/5fki3rkO/bjvz386qs/+WQI+87J7DglX3b9fO1LxrWJk9tve/ZAfm+fDwcAAADeJdL6f7jRUwz57EzP+j8ttP+t+n/27Jvu25a0SUXeMWOomOQb6pHvziu++aPyBSf+sFr/r5fv018+7xPbwuwV8VTa1ns6RHFt+sHdB1/e+vTRdNf1/JmO/Onn8tLJH37m2Nzhr9TzF0Ih6T8v2y3/qW2HM+LaWzNPPHX4wMIN7fmzPfb/wO73/+n33znyymr+N3aONPJ/YJ39r5//7Jsrzx9//KEb2/MP98g/edOW779Znv1H5/5HOhZOPvn6H7zlr9AhimtvTD1zzdblXQfb84cQJloD08//qSe+VV7+9bYjaf70tyIX7+rI3/JPrbXtOHOK4tryjksmR5+c39KeP+rIn+7/xP0/eOtLJ567rnP/t3fuv2f+zv1ftydzyws7Rwf58QwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDtAtbK0WFkZHwuZEKIeMbUu0rFMLo7LA+T92EXX3nD9azNfb+3LZwdYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjbVCtLi5WV8bGhKISoR0yti3Qsk4vj8gB55y59/bGXb/zV+1r7SgOsAwAAAPSX1uHN2r8QSiEXcmFkre6fOLn9tmcP5PeGYn00Sq7Z6dm5+Q/dMXt05vbT9OYAAADARqX1f7bRUwz57EVhOKn/l3dcMjn65PyWtP4PIUysNoU7pqaro6FxTnDdnswtL+wcLTfOCVrjLj08O50cE6Tr3n/V1pfmPrtyfdd19zfj3ph65pqty7sOpnHDyXUt7rJm3PSDuw++vPXpo2ncUHpOsRq3rxn31swTTx0+sHBDOp5pXa8l7uybK88ff/yhGxvrJNeRJC8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/IsdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NdRiFVFHAfgmXt39epdt92i3KRIxUSDZKWiEqJVSHpoQwp8scCHrIxMaglDCDchC5PwqSIoIgoCkYKghyIsKIMkCiK0hzC0h3qIjWhD3KjY3Zndu0dPu51aBfk+OIwz557f/M+c8ey9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+TW3rWesPfz0wO93Lrrt891bhnfd/v62p/b3zTl86747jr1y75snTnavWP3GQ+tHHu3o37u37+sbR77488lpg58Yb1ambiOE+HMM4covV7yw59MjC0fHYgihHrsGQ+iOtY+7YyGh93QI4b6JOqeefHf4uvtH28Hn5k4Zv6gQUryv0KznesZ1Ta2XC0sj7bNnPtx+xY+r1h879O264d7G6ccGJz8SGy37KYTOza3Xt4cQ5qVjVN5tPfni1G4IIcxvue6maepaOsP6ry3pL0rtnNQ2p8nJ55cU+u0zrKOt0DZmeF1VtVnOz/Lz65jl+Ysvt+I83al9L7Ur/2V+PR8x1GJom5ju4Ti5R0LLc4shjj37yX5tyl6Ihb0RQ4iFfq3Qr7cX7mts3rTR6jFOHc+fK4wvTuNtaXzJNHvt7pLxy/P9pv+opwr3XwxtnvGPifsak+v6/h9qORdqLe+gs43nehvpYTTTWDNefMY1f51FPrfx5PNvn9j56rKukjriOzHlx0r532y7+ejynd8N9ZTlb66l/Fql/IFVvx786a7PFpbm78/59Ur5x69f/uIHu3acKl2fX/L6tFXKr6+5ZmT17t6NpfW/lvMblfJfX3fg5c4bPjlYWn9vXp951dZn6+N/bHrr0qHS/JDz51fKX/vbZVev2X7ggdL8j/L6NCvlHxnY2r/nwat2LC7L/yrnL6iUv/SHezYdOrrleGn9fXl9uirl37Js7Yb+oUf2lb074+C5+gsLcGG6JH3Hejb1q/7O/K9afi+81BXHv/N1pGPB/zlRweg8nbOYDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7MDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFMBAAD//1iRV3w=") r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd344) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[], 0x1, 0x5e9, &(0x7f0000000cc0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x0, 0x0, 0x2080, 0x6ae0}) chroot(&(0x7f00000001c0)='./file0/../file0\x00') creat(&(0x7f0000000200)='./file0/../file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc240, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x6) 3.10696228s ago: executing program 4 (id=209): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, {0x0, 0xff}, {0x0, 0x1}}], 0x20) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.954186919s ago: executing program 2 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x2020) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) setxattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='trusted.syz\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000740)={0x28, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x28}}, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 1.038180323s ago: executing program 3 (id=211): syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f00000002c0)={[{@nospace_cache}, {@nodatacow}, {@nossd_spread}, {@nossd_spread}, {@nobarrier}, {@nospace_cache}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x5100, &(0x7f0000005180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 886.73734ms ago: executing program 2 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r3, 0xb}) dup2(r0, r2) 450.938123ms ago: executing program 1 (id=213): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x10, &(0x7f0000000140)={r0, 0x5, 0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 49.441648ms ago: executing program 2 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 0s ago: executing program 1 (id=215): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 70.805348][ T5090] cgroup: Unknown subsys name 'net' [ 70.982745][ T5090] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.714835][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.721590][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.730674][ T5090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.323512][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.335677][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.349354][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.357732][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.367805][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.376742][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.385331][ T5112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.394206][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.394605][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.405114][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.411994][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.419644][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.433476][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.438392][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.450264][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.459568][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.461589][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.469604][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.475265][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.482399][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.490661][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.496715][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.509853][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.514160][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.519866][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.525474][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.532888][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.545298][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.549217][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.566778][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.181641][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 77.216501][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 77.269446][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 77.389609][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 77.567791][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.578781][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.586816][ T5100] bridge_slave_0: entered allmulticast mode [ 77.597154][ T5100] bridge_slave_0: entered promiscuous mode [ 77.606781][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.614263][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.621694][ T5100] bridge_slave_1: entered allmulticast mode [ 77.628889][ T5100] bridge_slave_1: entered promiscuous mode [ 77.653964][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.661238][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.668462][ T5099] bridge_slave_0: entered allmulticast mode [ 77.676406][ T5099] bridge_slave_0: entered promiscuous mode [ 77.688915][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.697705][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.705129][ T5099] bridge_slave_1: entered allmulticast mode [ 77.712630][ T5099] bridge_slave_1: entered promiscuous mode [ 77.757180][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 77.788657][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.798215][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.806404][ T5105] bridge_slave_0: entered allmulticast mode [ 77.814379][ T5105] bridge_slave_0: entered promiscuous mode [ 77.823401][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.831322][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.838638][ T5105] bridge_slave_1: entered allmulticast mode [ 77.846330][ T5105] bridge_slave_1: entered promiscuous mode [ 77.886701][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.894216][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.902051][ T5115] bridge_slave_0: entered allmulticast mode [ 77.909283][ T5115] bridge_slave_0: entered promiscuous mode [ 77.934098][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.958536][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.973617][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.995957][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.003404][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.011031][ T5115] bridge_slave_1: entered allmulticast mode [ 78.018220][ T5115] bridge_slave_1: entered promiscuous mode [ 78.027652][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.117758][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.163401][ T5099] team0: Port device team_slave_0 added [ 78.172098][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.196927][ T5100] team0: Port device team_slave_0 added [ 78.206336][ T5100] team0: Port device team_slave_1 added [ 78.220337][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.232252][ T5099] team0: Port device team_slave_1 added [ 78.240778][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.266687][ T5105] team0: Port device team_slave_0 added [ 78.328433][ T5105] team0: Port device team_slave_1 added [ 78.418141][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.425402][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.458313][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.471110][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.478279][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.486300][ T5101] bridge_slave_0: entered allmulticast mode [ 78.493769][ T5101] bridge_slave_0: entered promiscuous mode [ 78.502686][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.509768][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.536179][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.551889][ T5115] team0: Port device team_slave_0 added [ 78.558639][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.565934][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.593018][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.593203][ T5109] Bluetooth: hci2: command tx timeout [ 78.607946][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.610009][ T5118] Bluetooth: hci4: command tx timeout [ 78.617351][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.622524][ T5110] Bluetooth: hci1: command tx timeout [ 78.655048][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.667664][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.671527][ T5110] Bluetooth: hci3: command tx timeout [ 78.675040][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.680351][ T5118] Bluetooth: hci0: command tx timeout [ 78.707056][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.724954][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.732908][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.740269][ T5101] bridge_slave_1: entered allmulticast mode [ 78.747440][ T5101] bridge_slave_1: entered promiscuous mode [ 78.754938][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.762339][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.788625][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.802441][ T5115] team0: Port device team_slave_1 added [ 78.913504][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.946582][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.954033][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.980092][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.994086][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.001148][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.027122][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.057993][ T5099] hsr_slave_0: entered promiscuous mode [ 79.065451][ T5099] hsr_slave_1: entered promiscuous mode [ 79.075572][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.103765][ T5105] hsr_slave_0: entered promiscuous mode [ 79.110407][ T5105] hsr_slave_1: entered promiscuous mode [ 79.116888][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.124935][ T5105] Cannot create hsr debugfs directory [ 79.171553][ T5101] team0: Port device team_slave_0 added [ 79.208233][ T5100] hsr_slave_0: entered promiscuous mode [ 79.218762][ T5100] hsr_slave_1: entered promiscuous mode [ 79.225394][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.233499][ T5100] Cannot create hsr debugfs directory [ 79.254625][ T5101] team0: Port device team_slave_1 added [ 79.342874][ T5115] hsr_slave_0: entered promiscuous mode [ 79.350938][ T5115] hsr_slave_1: entered promiscuous mode [ 79.357170][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.364874][ T5115] Cannot create hsr debugfs directory [ 79.390823][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.397905][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.424098][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.486566][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.493737][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.519902][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.731573][ T5101] hsr_slave_0: entered promiscuous mode [ 79.738251][ T5101] hsr_slave_1: entered promiscuous mode [ 79.769116][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.777687][ T5101] Cannot create hsr debugfs directory [ 80.048914][ T5105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.062974][ T5105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.095159][ T5105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.106409][ T5105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.187417][ T5099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.206177][ T5099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.232607][ T5099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.246988][ T5099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.324107][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.344507][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.357346][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.368374][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.453099][ T5100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.483392][ T5100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.497046][ T5100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.550609][ T5100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.622333][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.663343][ T5101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.671460][ T5118] Bluetooth: hci4: command tx timeout [ 80.672565][ T5110] Bluetooth: hci2: command tx timeout [ 80.682833][ T5118] Bluetooth: hci1: command tx timeout [ 80.695205][ T5101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.707163][ T5101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.747515][ T5101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.755420][ T5110] Bluetooth: hci0: command tx timeout [ 80.756455][ T5118] Bluetooth: hci3: command tx timeout [ 80.853157][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.873197][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.907932][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.915379][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.954645][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.961888][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.991932][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.011271][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.063257][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.070550][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.122448][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.150812][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.174086][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.181380][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.222118][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.229402][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.270321][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.277610][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.326228][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.388594][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.395920][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.446428][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.454124][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.645486][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.675041][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.707165][ T5100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.777111][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.831936][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.839172][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.862566][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.924597][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.931854][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.075521][ T5105] veth0_vlan: entered promiscuous mode [ 82.201283][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.215281][ T5105] veth1_vlan: entered promiscuous mode [ 82.256266][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.302886][ T5099] veth0_vlan: entered promiscuous mode [ 82.389899][ T5099] veth1_vlan: entered promiscuous mode [ 82.482798][ T5100] veth0_vlan: entered promiscuous mode [ 82.574268][ T5100] veth1_vlan: entered promiscuous mode [ 82.611428][ T5105] veth0_macvtap: entered promiscuous mode [ 82.676276][ T5099] veth0_macvtap: entered promiscuous mode [ 82.690708][ T5105] veth1_macvtap: entered promiscuous mode [ 82.744795][ T5099] veth1_macvtap: entered promiscuous mode [ 82.760729][ T5118] Bluetooth: hci1: command tx timeout [ 82.766206][ T5118] Bluetooth: hci4: command tx timeout [ 82.769311][ T5110] Bluetooth: hci2: command tx timeout [ 82.804893][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.828629][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.839244][ T5109] Bluetooth: hci0: command tx timeout [ 82.844722][ T5109] Bluetooth: hci3: command tx timeout [ 82.886817][ T5100] veth0_macvtap: entered promiscuous mode [ 82.947055][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.977547][ T5105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995191][ T5105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.007551][ T5105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019066][ T5105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.042194][ T5100] veth1_macvtap: entered promiscuous mode [ 83.067931][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.078968][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.094337][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.125728][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.136422][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.151377][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.163493][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.174383][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.185074][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.196738][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.208563][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.236876][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.248737][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.258836][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.269952][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.281603][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.316367][ T5099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.330772][ T5099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.341104][ T5099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.350215][ T5099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.366713][ T5100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.375569][ T5100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.385268][ T5100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395851][ T5100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.464453][ T5115] veth0_vlan: entered promiscuous mode [ 83.541710][ T5115] veth1_vlan: entered promiscuous mode [ 83.556421][ T5101] veth0_vlan: entered promiscuous mode [ 83.600934][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.613352][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.652583][ T5101] veth1_vlan: entered promiscuous mode [ 83.679536][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.687408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.776021][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.784624][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.845480][ T5101] veth0_macvtap: entered promiscuous mode [ 83.856891][ T5101] veth1_macvtap: entered promiscuous mode [ 83.866582][ T5115] veth0_macvtap: entered promiscuous mode [ 83.899141][ T2445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.905989][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.906984][ T2445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.924635][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.974918][ T5115] veth1_macvtap: entered promiscuous mode [ 84.005236][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.015379][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.035213][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.036401][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.052838][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.063885][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.074459][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.085539][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.104979][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.128872][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.139881][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.150692][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.163579][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.173623][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.184220][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.194701][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.205368][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.218461][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.258161][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.274417][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.287406][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.298424][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.308872][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.332723][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.352942][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.373125][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.386992][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.398023][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.409378][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.423118][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.436453][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.457510][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.482595][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.496221][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.515703][ T5101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.527892][ T5101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.538903][ T5101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.548319][ T5101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.572034][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.582896][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.596220][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.606829][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.834597][ T5110] Bluetooth: hci1: command tx timeout [ 84.844665][ T5110] Bluetooth: hci2: command tx timeout [ 84.853381][ T5109] Bluetooth: hci4: command tx timeout [ 84.912252][ T5110] Bluetooth: hci0: command tx timeout [ 84.917833][ T5109] Bluetooth: hci3: command tx timeout [ 85.651361][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.705938][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.913557][ T2419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.943926][ T2419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.254252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.331253][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.339025][ C1] sched: RT throttling activated [ 86.732549][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.769432][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.881763][ T5205] loop2: detected capacity change from 0 to 128 [ 87.029522][ T5205] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 87.176371][ T58] cfg80211: failed to load regulatory.db [ 88.572767][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 89.080825][ T5217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.339882][ T5228] loop2: detected capacity change from 0 to 512 [ 89.429987][ T5228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.10: Parent and EA inode have the same ino 15 [ 89.489612][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.504114][ T5228] EXT4-fs (loop2): Remounting filesystem read-only [ 89.545844][ T5228] EXT4-fs (loop2): 1 orphan inode deleted [ 89.583668][ T5228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.618606][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.640941][ T5234] loop4: detected capacity change from 0 to 2048 [ 89.691040][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 89.735700][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.778574][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.804919][ T5234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.818027][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.842356][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.885597][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.185317][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.217594][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.229555][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.243821][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.356236][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.558751][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.722824][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.774161][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.849091][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.909895][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.949699][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.968937][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.991391][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.026135][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.037053][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.068824][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.080004][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.097092][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.129767][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.143073][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 91.155501][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 91.179587][ T9] usb 4-1: Product: syz [ 91.183813][ T9] usb 4-1: Manufacturer: syz [ 91.210375][ T9] usb 4-1: SerialNumber: syz [ 91.255465][ T9] usb 4-1: config 0 descriptor?? [ 91.331139][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 91.972343][ T5247] loop1: detected capacity change from 0 to 32768 [ 91.981200][ T5247] ======================================================= [ 91.981200][ T5247] WARNING: The mand mount option has been deprecated and [ 91.981200][ T5247] and is ignored by this kernel. Remove the mand [ 91.981200][ T5247] option from the mount to silence this warning. [ 91.981200][ T5247] ======================================================= [ 92.027659][ T5249] loop2: detected capacity change from 0 to 32768 [ 92.078861][ T5247] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.086173][ T5249] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 92.086173][ T5249] disk_groups (size 2912): [ 92.086173][ T5249] [deleted] [deleted] [deleted] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [ 92.182785][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.317919][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.357925][ T5115] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.472779][ T5247] XFS (loop1): Ending clean mount [ 92.538399][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 92.546966][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 92.552822][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.567191][ T5247] XFS (loop1): Quotacheck needed: Please wait. [ 92.597828][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 92.604713][ T9] usb 4-1: USB disconnect, device number 2 [ 92.657557][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 92.658770][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.699296][ T5247] XFS (loop1): Quotacheck: Done. [ 92.740168][ T25] usb 1-1: config 0 descriptor?? [ 92.784457][ T5249] loop2: detected capacity change from 0 to 1024 [ 93.308895][ T29] audit: type=1800 audit(1720205050.213:2): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 93.369559][ T5280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23'. [ 93.488106][ T25] ath6kl: Failed to submit usb control message: -71 [ 93.497299][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 93.504428][ T25] ath6kl: Unable to send get target info: -71 [ 93.527431][ T25] ath6kl: Failed to init ath6kl core: -71 [ 93.547100][ T5284] loop3: detected capacity change from 0 to 64 [ 93.583537][ T5284] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 94.034107][ T25] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 94.053225][ T25] usb 1-1: USB disconnect, device number 2 [ 94.163202][ T5101] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.749052][ T5293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.243356][ T5304] loop2: detected capacity change from 0 to 2048 [ 95.411290][ T5304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.402977][ T5325] loop1: detected capacity change from 0 to 64 [ 96.590575][ T5118] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 96.606615][ T5118] Bluetooth: hci4: Injecting HCI hardware error event [ 96.617100][ T5118] Bluetooth: hci4: hardware error 0x00 [ 97.984282][ T5299] loop0: detected capacity change from 0 to 262144 [ 98.007040][ T5299] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.30 (5299) [ 98.350575][ T5331] loop4: detected capacity change from 0 to 64 [ 98.398203][ T5323] loop3: detected capacity change from 0 to 32768 [ 98.415618][ T5331] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 98.474520][ T5323] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 98.474520][ T5323] disk_groups (size 2912): [ 98.474520][ T5323] [deleted] [deleted] [deleted] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [ 98.577393][ T5334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'. [ 98.789190][ T5118] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 98.843902][ T5323] loop3: detected capacity change from 0 to 1024 [ 99.323532][ T5118] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 99.323662][ T5118] Bluetooth: hci1: Injecting HCI hardware error event [ 99.325714][ T5109] Bluetooth: hci1: hardware error 0x00 [ 99.529843][ T29] audit: type=1800 audit(1720205056.443:3): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.36" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 100.214785][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.282709][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 100.524138][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.535711][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.566572][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.583410][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.604991][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.960540][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.103762][ T5356] loop4: detected capacity change from 0 to 256 [ 101.544016][ T2398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.629127][ T5109] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 101.750187][ T5160] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.796556][ T5370] loop4: detected capacity change from 0 to 1 [ 101.866258][ T5370] syz.4.49: attempt to access beyond end of device [ 101.866258][ T5370] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 101.902919][ T2398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.940710][ T5370] SQUASHFS error: Failed to read block 0x0: -5 [ 101.971563][ T5160] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.999290][ T5160] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.002211][ T5370] unable to read squashfs_super_block [ 102.042629][ T5160] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.062256][ T5375] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.087081][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.116893][ T5160] usb 4-1: config 0 descriptor?? [ 102.139522][ T5370] loop4: detected capacity change from 0 to 512 [ 102.146162][ T2398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.211410][ T5370] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.319393][ T5370] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.351706][ T5370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 102.369163][ T5370] System zones: 1-12 [ 102.381743][ T5160] usb 4-1: string descriptor 0 read error: -71 [ 102.409232][ T5160] usb 4-1: USB disconnect, device number 3 [ 102.422641][ T5370] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.489720][ T5370] EXT4-fs (loop4): 1 truncate cleaned up [ 102.502288][ T5370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.586690][ T2398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.659282][ T5370] loop4: detected capacity change from 512 to 0 [ 102.690548][ T5381] syz.4.49: attempt to access beyond end of device [ 102.690548][ T5381] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 102.739792][ T5370] syz.4.49: attempt to access beyond end of device [ 102.739792][ T5370] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 102.753517][ T5109] Bluetooth: hci0: command tx timeout [ 102.799242][ T5370] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.49: reading directory lblock 0 [ 102.824866][ T5377] kvm: emulating exchange as write [ 102.845324][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 102.862550][ T5370] syz.4.49: attempt to access beyond end of device [ 102.862550][ T5370] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 102.874723][ T5381] syz.4.49: attempt to access beyond end of device [ 102.874723][ T5381] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 102.989779][ T5381] syz.4.49: attempt to access beyond end of device [ 102.989779][ T5381] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 103.059439][ T5370] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 103.066870][ T5381] syz.4.49: attempt to access beyond end of device [ 103.066870][ T5381] loop4: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 103.151411][ T5381] EXT4-fs error (device loop4): ext4_get_inode_loc:4569: inode #18: block 9: comm syz.4.49: unable to read itable block [ 103.165397][ T5370] EXT4-fs (loop4): I/O error while writing superblock [ 103.186946][ T5388] loop3: detected capacity change from 0 to 2048 [ 103.229425][ T5381] EXT4-fs (loop4): previous I/O error to superblock detected [ 103.236979][ T5381] syz.4.49: attempt to access beyond end of device [ 103.236979][ T5381] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 103.254085][ T5381] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 103.262867][ T5381] EXT4-fs (loop4): I/O error while writing superblock [ 103.272404][ T5381] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5805: IO failure [ 103.280119][ T2398] bridge_slave_1: left allmulticast mode [ 103.282024][ T5381] syz.4.49: attempt to access beyond end of device [ 103.282024][ T5381] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 103.301006][ T5381] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 103.310016][ T5381] EXT4-fs (loop4): I/O error while writing superblock [ 103.317123][ T5381] EXT4-fs error (device loop4): ext4_dirty_inode:6009: inode #18: comm syz.4.49: mark_inode_dirty error [ 103.329264][ T5381] syz.4.49: attempt to access beyond end of device [ 103.329264][ T5381] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 103.343424][ T5381] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 103.352115][ T5381] EXT4-fs (loop4): I/O error while writing superblock [ 103.356844][ T5388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.363244][ T5383] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.49: reading directory lblock 0 [ 103.372664][ T2398] bridge_slave_1: left promiscuous mode [ 103.385855][ T5383] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 103.397673][ T5383] EXT4-fs (loop4): I/O error while writing superblock [ 103.447410][ T5385] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.49: reading directory lblock 0 [ 103.489515][ T2398] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.499886][ T5385] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 103.520541][ T5373] loop1: detected capacity change from 0 to 32768 [ 103.531779][ T5385] EXT4-fs (loop4): I/O error while writing superblock [ 103.651649][ T5373] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 103.651649][ T5373] disk_groups (size 2912): [ 103.651649][ T5373] [deleted] [deleted] [deleted] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [ 103.816854][ T2398] bridge_slave_0: left allmulticast mode [ 103.839055][ T2398] bridge_slave_0: left promiscuous mode [ 103.845665][ T2398] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.867067][ T1039] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4554: inode #18: block 9: comm kworker/u8:5: unable to read itable block [ 103.933455][ T5373] loop1: detected capacity change from 0 to 1024 [ 103.942414][ T1039] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 103.996093][ T1039] EXT4-fs (loop4): I/O error while writing superblock [ 104.005371][ T5398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 104.045907][ T5115] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.369715][ T5115] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 104.430248][ T29] audit: type=1800 audit(1720205061.343:4): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 104.839513][ T5109] Bluetooth: hci0: command tx timeout [ 105.481702][ T5109] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 105.494249][ T5109] Bluetooth: hci3: Injecting HCI hardware error event [ 105.511868][ T5118] Bluetooth: hci3: hardware error 0x00 [ 105.641006][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.748299][ T2398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.818688][ T2398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.853276][ T2398] bond0 (unregistering): Released all slaves [ 106.342612][ T5420] loop3: detected capacity change from 0 to 512 [ 106.383655][ T5407] loop1: detected capacity change from 0 to 32768 [ 106.394907][ T5407] XFS: attr2 mount option is deprecated. [ 106.404787][ T5420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.418705][ T5420] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.492642][ T5420] EXT4-fs warning (device loop3): ext4_empty_dir:3052: inode #12: comm syz.3.62: directory missing '.' [ 106.516730][ T5407] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 106.590112][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.623013][ T5407] XFS (loop1): Ending clean mount [ 106.636685][ T5407] XFS (loop1): Quotacheck needed: Please wait. [ 106.793668][ T5407] XFS (loop1): Quotacheck: Done. [ 106.793693][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.834533][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.857259][ T5346] bridge_slave_0: entered allmulticast mode [ 106.872036][ T5346] bridge_slave_0: entered promiscuous mode [ 106.905446][ T5440] Zero length message leads to an empty skb [ 106.913746][ T5109] Bluetooth: hci0: command tx timeout [ 107.030412][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.063856][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.087880][ T5346] bridge_slave_1: entered allmulticast mode [ 107.112445][ T5346] bridge_slave_1: entered promiscuous mode [ 107.537821][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.606951][ T5101] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 107.659743][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.702058][ T2398] hsr_slave_0: left promiscuous mode [ 107.709405][ T5118] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 107.754093][ T5457] loop3: detected capacity change from 0 to 2048 [ 107.789778][ T2398] hsr_slave_1: left promiscuous mode [ 107.868822][ T2398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.920414][ T2398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.934472][ T5457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.967332][ T2398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.988062][ T2398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.123817][ T2398] veth1_macvtap: left promiscuous mode [ 108.161386][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.173719][ T2398] veth0_macvtap: left promiscuous mode [ 108.187217][ T2398] veth1_vlan: left promiscuous mode [ 108.196968][ T2398] veth0_vlan: left promiscuous mode [ 108.228386][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.273171][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.283818][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.294300][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.304215][ T5109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.314641][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.786507][ T5470] loop3: detected capacity change from 0 to 8192 [ 109.049364][ T5109] Bluetooth: hci0: command tx timeout [ 109.877782][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 110.432359][ T5109] Bluetooth: hci4: command tx timeout [ 110.601167][ T2398] team0 (unregistering): Port device team_slave_1 removed [ 110.664039][ T2398] team0 (unregistering): Port device team_slave_0 removed [ 110.714684][ T5485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'. [ 110.719186][ T932] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.728557][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 110.752952][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 110.904937][ T5489] loop2: detected capacity change from 0 to 128 [ 110.921938][ T932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 110.940772][ T932] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 110.951982][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.972902][ T932] usb 4-1: config 0 descriptor?? [ 110.974739][ T5489] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.984591][ T932] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 111.030674][ T5489] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.109891][ T5105] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.187755][ T5493] loop2: detected capacity change from 0 to 64 [ 111.214235][ T5493] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 111.240563][ T5480] loop3: detected capacity change from 0 to 1024 [ 111.280669][ T5480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.409353][ T25] usb 4-1: USB disconnect, device number 4 [ 111.951162][ T5346] team0: Port device team_slave_0 added [ 111.981425][ T5346] team0: Port device team_slave_1 added [ 112.011421][ T5502] netlink: 2060 bytes leftover after parsing attributes in process `syz.2.82'. [ 112.061643][ T5502] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 112.076231][ T5502] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.82'. [ 112.114227][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.180502][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.210166][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.273981][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.312405][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.339911][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.398115][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.486718][ T5500] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 112.509335][ T5109] Bluetooth: hci4: command tx timeout [ 112.776022][ T5521] loop1: detected capacity change from 0 to 128 [ 112.841531][ T5521] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.849834][ T5346] hsr_slave_0: entered promiscuous mode [ 112.878568][ T5521] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.916671][ T5525] loop3: detected capacity change from 0 to 64 [ 112.948239][ T5346] hsr_slave_1: entered promiscuous mode [ 112.999373][ T5525] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 113.122413][ T5101] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.515324][ T5463] chnl_net:caif_netlink_parms(): no params data found [ 113.539891][ T5537] loop3: detected capacity change from 0 to 2048 [ 113.713723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.816492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.923754][ T2398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.959352][ T5537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.058693][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.455942][ T2398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.591710][ T5109] Bluetooth: hci4: command tx timeout [ 114.778884][ T2398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.877684][ T5566] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 114.886742][ T5566] netlink: 'syz.3.98': attribute type 4 has an invalid length. [ 114.895941][ T5566] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.98'. [ 115.138010][ T5576] loop2: detected capacity change from 0 to 64 [ 115.171883][ T5576] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 115.246603][ T2398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.692215][ T5109] Bluetooth: hci4: command tx timeout [ 116.795347][ T5463] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.803258][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.812432][ T5463] bridge_slave_0: entered allmulticast mode [ 116.821069][ T5463] bridge_slave_0: entered promiscuous mode [ 116.836088][ T5589] warning: `syz.3.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.872559][ T5463] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.886860][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.895133][ T5463] bridge_slave_1: entered allmulticast mode [ 116.902969][ T5463] bridge_slave_1: entered promiscuous mode [ 117.180841][ T5463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.241344][ T5463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.623402][ T5463] team0: Port device team_slave_0 added [ 117.652608][ T5463] team0: Port device team_slave_1 added [ 118.163887][ T5616] loop3: detected capacity change from 0 to 64 [ 118.237735][ T5616] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 119.574774][ T5628] Cannot find del_set index 0 as target [ 119.994728][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.007910][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.042247][ T5463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.059552][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.075948][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.125779][ T5463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.145765][ T2398] bridge_slave_1: left allmulticast mode [ 120.152095][ T2398] bridge_slave_1: left promiscuous mode [ 120.157853][ T2398] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.171242][ T2398] bridge_slave_0: left allmulticast mode [ 120.177286][ T2398] bridge_slave_0: left promiscuous mode [ 120.183486][ T2398] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.721626][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bda0c00: rx timeout, send abort [ 120.773902][ T2398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.804234][ T2398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.816717][ T2398] bond0 (unregistering): Released all slaves [ 121.157910][ T5642] loop2: detected capacity change from 0 to 512 [ 121.231418][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bda0c00: abort rx timeout. Force session deactivation [ 121.289797][ T5642] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 121.330255][ T5642] UDF-fs: Scanning with blocksize 512 failed [ 121.379582][ T5642] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 121.387030][ T5642] UDF-fs: Scanning with blocksize 1024 failed [ 121.446203][ T5642] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 121.489151][ T5642] UDF-fs: Scanning with blocksize 2048 failed [ 121.504127][ T5642] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 121.547587][ T5652] syz.1.120 uses obsolete (PF_INET,SOCK_PACKET) [ 121.547624][ T5642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.651125][ T5463] hsr_slave_0: entered promiscuous mode [ 121.688564][ T5463] hsr_slave_1: entered promiscuous mode [ 121.722889][ T5463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.826881][ T5463] Cannot create hsr debugfs directory [ 121.890957][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.081295][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.531141][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.438682][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.732605][ T2398] hsr_slave_0: left promiscuous mode [ 123.745131][ T2398] hsr_slave_1: left promiscuous mode [ 123.755906][ T2398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.763784][ T2398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.773258][ T2398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.782901][ T2398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.809609][ T2398] veth1_macvtap: left promiscuous mode [ 123.815369][ T2398] veth0_macvtap: left promiscuous mode [ 123.821820][ T2398] veth1_vlan: left promiscuous mode [ 123.827322][ T2398] veth0_vlan: left promiscuous mode [ 124.666206][ T2398] team0 (unregistering): Port device team_slave_1 removed [ 124.807970][ T2398] team0 (unregistering): Port device team_slave_0 removed [ 126.736750][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.906709][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a8af400: rx timeout, send abort [ 126.915237][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a8ac800: rx timeout, send abort [ 126.929112][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a8af400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.945016][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a8ac800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.457190][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.786516][ T5703] xt_socket: unknown flags 0x50 [ 127.805858][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.813129][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.888316][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.895777][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.087691][ T5709] loop1: detected capacity change from 0 to 512 [ 128.099840][ T5709] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 128.113535][ T5709] UDF-fs: Scanning with blocksize 512 failed [ 128.127954][ T5709] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 128.170967][ T5709] UDF-fs: Scanning with blocksize 1024 failed [ 128.188451][ T5709] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 128.220736][ T5709] UDF-fs: Scanning with blocksize 2048 failed [ 128.247133][ T5709] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 128.320355][ T5709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.377344][ T5463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.579663][ T5463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.686241][ T5463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.956093][ T5463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.386341][ T5723] loop3: detected capacity change from 0 to 64 [ 129.419309][ T5723] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 129.465049][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.696353][ T5463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.772706][ T5346] veth0_vlan: entered promiscuous mode [ 129.820190][ T5463] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.909212][ T5346] veth1_vlan: entered promiscuous mode [ 129.955821][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.963064][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.601764][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.609040][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.980421][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 131.178021][ T5346] veth0_macvtap: entered promiscuous mode [ 131.226373][ T5346] veth1_macvtap: entered promiscuous mode [ 131.313911][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.355960][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.397906][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.443405][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.476830][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.492448][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.505743][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.541084][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.555203][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.567809][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.579937][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.590131][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.600855][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.613905][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.646888][ T5346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.657687][ T5346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.667634][ T5346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.678367][ T5346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.167474][ T5463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.264907][ T5770] loop3: detected capacity change from 0 to 512 [ 132.319846][ T5774] loop2: detected capacity change from 0 to 512 [ 132.328269][ T5770] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 132.367269][ T5774] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.143: corrupted in-inode xattr: bad e_name length [ 132.381631][ T5770] UDF-fs: Scanning with blocksize 512 failed [ 132.401351][ T2398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.420220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.428081][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.445680][ T5779] loop1: detected capacity change from 0 to 64 [ 132.455862][ T5774] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.143: couldn't read orphan inode 15 (err -117) [ 132.459393][ T5770] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 132.471503][ T2398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.481498][ T5779] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 132.496698][ T5770] UDF-fs: Scanning with blocksize 1024 failed [ 132.529397][ T5774] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000060000 r/w without journal. Quota mode: writeback. [ 132.550797][ T5770] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 132.596437][ T5770] UDF-fs: Scanning with blocksize 2048 failed [ 132.644342][ T5770] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 132.722732][ T5770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.873298][ T5790] syz.1.145[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.873482][ T5790] syz.1.145[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.017577][ T5791] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.40'. [ 133.155289][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.161793][ T5108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.162496][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371268][ T5108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.395391][ T5108] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 133.404894][ T5162] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.428500][ T5463] veth0_vlan: entered promiscuous mode [ 133.444389][ T5108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.482082][ T5463] veth1_vlan: entered promiscuous mode [ 133.497142][ T5108] usb 3-1: config 0 descriptor?? [ 133.727555][ T5463] veth0_macvtap: entered promiscuous mode [ 133.756204][ T5108] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 133.786475][ T5463] veth1_macvtap: entered promiscuous mode [ 133.894473][ T5162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.060048][ T5162] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 134.269845][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.341797][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.397262][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.428333][ T5162] usb 1-1: config 0 descriptor?? [ 134.467111][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.518313][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.561781][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.572364][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.582843][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.594329][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.607633][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.660709][ T5162] ath6kl: Failed to submit usb control message: -71 [ 134.668380][ T5162] ath6kl: unable to send the bmi data to the device: -71 [ 134.677662][ T5162] ath6kl: Unable to send get target info: -71 [ 134.678076][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.720269][ T5162] ath6kl: Failed to init ath6kl core: -71 [ 134.726597][ T5162] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 134.746684][ T9] usb 3-1: USB disconnect, device number 2 [ 134.763803][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.794434][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.819348][ T5162] usb 1-1: USB disconnect, device number 3 [ 134.826067][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.931269][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.987747][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.050354][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.087713][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.123157][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.191584][ T5463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.221226][ T5463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.243487][ T5463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.261573][ T5463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.399116][ T5777] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 312: padding at end of block bitmap is not set [ 135.666328][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.696585][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.718456][ T5105] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000060000. [ 136.043704][ T2445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.079096][ T2445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.721669][ T5848] loop3: detected capacity change from 0 to 64 [ 136.764005][ T5848] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 137.307766][ T5865] fuse: Unknown parameter 'group_i00000000000000000000' [ 137.331787][ T5866] loop2: detected capacity change from 0 to 512 [ 137.379924][ T5866] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 137.410725][ T5866] UDF-fs: Scanning with blocksize 512 failed [ 137.450292][ T5866] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 137.470966][ T5866] UDF-fs: Scanning with blocksize 1024 failed [ 137.499928][ T5866] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 137.507387][ T5866] UDF-fs: Scanning with blocksize 2048 failed [ 137.544389][ T5866] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 137.591100][ T5866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.623843][ T5873] loop3: detected capacity change from 0 to 128 [ 137.851035][ T5873] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.917937][ T5873] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.698356][ T5100] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.952639][ T5845] loop4: detected capacity change from 0 to 32768 [ 138.966952][ T5899] loop3: detected capacity change from 0 to 64 [ 138.974291][ T5845] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 138.974291][ T5845] disk_groups (size 2912): [ 138.974291][ T5845] [deleted] [deleted] [deleted] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [ 139.077781][ T5899] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 139.142568][ T5155] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.344920][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 139.347592][ T5910] loop3: detected capacity change from 0 to 512 [ 139.366829][ T5155] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.396785][ T5155] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.437286][ T5155] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 139.465143][ T5914] fuse: Unknown parameter 'group_i00000000000000000000' [ 139.483831][ T5910] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.171: corrupted in-inode xattr: invalid ea_ino [ 139.497615][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.508472][ T5910] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.171: couldn't read orphan inode 15 (err -117) [ 139.577718][ T5845] loop4: detected capacity change from 0 to 1024 [ 139.610439][ T5910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.635216][ T5155] hub 1-1:4.0: USB hub found [ 139.874123][ T5155] hub 1-1:4.0: 2 ports detected [ 139.975934][ T29] audit: type=1800 audit(1720205096.893:5): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.66" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 140.268364][ T5925] loop1: detected capacity change from 0 to 2048 [ 140.367930][ T5925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.527127][ T5932] loop4: detected capacity change from 0 to 512 [ 140.593607][ T5932] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 140.623763][ T5932] UDF-fs: Scanning with blocksize 512 failed [ 140.648381][ T5932] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 140.688949][ T5932] UDF-fs: Scanning with blocksize 1024 failed [ 140.732166][ T5932] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 140.800803][ T5932] UDF-fs: Scanning with blocksize 2048 failed [ 140.873874][ T5155] usb 1-1: USB disconnect, device number 4 [ 140.971001][ T5932] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 141.084425][ T5932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.766682][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.469446][ T5956] loop1: detected capacity change from 0 to 128 [ 143.122018][ T5960] loop4: detected capacity change from 0 to 1024 [ 143.129535][ T5960] ext4: Unknown parameter 'smackfsfloor' [ 143.664852][ T5956] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.764095][ T5956] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.968800][ T5970] loop4: detected capacity change from 0 to 64 [ 144.010910][ T5970] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 144.087943][ T5101] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.390639][ T5978] fuse: Unknown parameter 'group_i00000000000000000000' [ 144.459122][ T29] audit: type=1326 audit(1720205101.373:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33d8975bd9 code=0x0 [ 144.902027][ T5989] loop0: detected capacity change from 0 to 2048 [ 145.010938][ T5989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.392475][ T5993] loop4: detected capacity change from 0 to 512 [ 145.445740][ T5993] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 145.454153][ T5993] UDF-fs: Scanning with blocksize 512 failed [ 145.469511][ T5993] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 145.489120][ T5993] UDF-fs: Scanning with blocksize 1024 failed [ 145.566731][ T5993] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 145.618923][ T5993] UDF-fs: Scanning with blocksize 2048 failed [ 145.647171][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.708310][ T5993] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 145.781422][ T5993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.126064][ T5346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.829659][ T5986] loop1: detected capacity change from 0 to 32768 [ 146.862998][ T5986] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 146.862998][ T5986] disk_groups (size 2912): [ 146.862998][ T5986] [deleted] [deleted] [deleted] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [ 146.902264][ T6007] syzkaller0: entered promiscuous mode [ 147.054679][ T6007] syzkaller0: entered allmulticast mode [ 147.325157][ T5986] loop1: detected capacity change from 0 to 1024 [ 147.552516][ T6018] loop4: detected capacity change from 0 to 1024 [ 147.565645][ T6018] ext4: Unknown parameter 'smackfsfloor' [ 147.667094][ T6018] loop4: detected capacity change from 0 to 512 [ 147.823419][ T6018] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 147.862776][ T6018] EXT4-fs error (device loop4): ext4_get_journal_inode:5754: comm syz.4.194: inode #67108864: comm syz.4.194: iget: illegal inode # [ 147.907468][ T6018] EXT4-fs (loop4): no journal found [ 148.315725][ T29] audit: type=1800 audit(1720205105.213:7): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 148.738785][ T6023] fuse: Unknown parameter 'group_id00000000000000000000' [ 148.752614][ T5162] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 148.944844][ T5162] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 149.210493][ T5162] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 149.235263][ T5162] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 149.247390][ T5162] usb 3-1: config 0 has no interface number 0 [ 149.254569][ T5162] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.268673][ T5162] usb 3-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=c0.d9 [ 149.278203][ T5162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.875899][ T5162] usb 3-1: config 0 descriptor?? [ 150.154662][ T5162] option 3-1:0.151: GSM modem (1-port) converter detected [ 150.311275][ T6033] loop4: detected capacity change from 0 to 512 [ 150.420619][ T6033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.444070][ T6033] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.540733][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.641560][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.653548][ T6039] loop3: detected capacity change from 0 to 2048 [ 150.682235][ T5463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.748187][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.075482][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.193234][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.437823][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.528122][ T6049] loop4: detected capacity change from 0 to 512 [ 151.555375][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.632017][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.641985][ T6049] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 151.679201][ T6049] UDF-fs: Scanning with blocksize 512 failed [ 151.724858][ T6049] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 151.787863][ T6049] UDF-fs: Scanning with blocksize 1024 failed [ 151.840129][ T6049] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 151.863556][ T6049] UDF-fs: Scanning with blocksize 2048 failed [ 151.896886][ T6049] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 151.918444][ T6049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.235072][ T5162] usb 3-1: USB disconnect, device number 3 [ 152.284042][ T5162] option 3-1:0.151: device disconnected [ 152.571689][ T58] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.791004][ T58] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 152.819208][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 152.878467][ T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.934507][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.996762][ T58] usb 2-1: config 0 descriptor?? [ 153.014376][ T58] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 153.311328][ T6059] loop3: detected capacity change from 0 to 32768 [ 153.349538][ T6059] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 153.349538][ T6059] disk_groups (size 2912): [ 153.349538][ T6059] [deleted] [deleted] [deleted] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [ 153.469033][ C0] DEBUG: holding rtnl_mutex for 505 jiffies. [ 153.477258][ C0] task:syz.0.191 state:D stack:24672 pid:6006 tgid:6006 ppid:5346 flags:0x00004006 [ 153.487549][ C0] Call Trace: [ 153.490913][ C0] [ 153.493883][ C0] __schedule+0x1800/0x4a60 [ 153.498484][ C0] ? __pfx___schedule+0x10/0x10 [ 153.503541][ C0] ? __pfx_lock_release+0x10/0x10 [ 153.508621][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 153.514649][ C0] ? schedule+0x90/0x320 [ 153.518944][ C0] schedule+0x14b/0x320 [ 153.523209][ C0] synchronize_rcu_expedited+0x684/0x830 [ 153.528906][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 153.535217][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 153.540616][ C0] ? __pfx___might_resched+0x10/0x10 [ 153.545960][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.552045][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 153.558171][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.564643][ C0] synchronize_rcu+0x11b/0x360 [ 153.569501][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 153.574860][ C0] lockdep_unregister_key+0x556/0x610 [ 153.580336][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 153.586282][ C0] ? pfifo_fast_destroy+0x86/0xe0 [ 153.591390][ C0] ? __qdisc_destroy+0x150/0x410 [ 153.596371][ C0] ? rcu_is_watching+0x15/0xb0 [ 153.601232][ C0] ? __qdisc_destroy+0x150/0x410 [ 153.606243][ C0] ? kfree+0x4e/0x360 [ 153.610321][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 153.615911][ C0] __qdisc_destroy+0x165/0x410 [ 153.620770][ C0] dev_shutdown+0x9b/0x440 [ 153.625247][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 153.631703][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 153.638528][ C0] ? mark_lock+0x9a/0x360 [ 153.642985][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.649057][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.655450][ C0] ? queue_delayed_work_on+0x1eb/0x390 [ 153.661028][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 153.666290][ C0] unregister_netdevice_queue+0x303/0x370 [ 153.672210][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 153.678514][ C0] __tun_detach+0x6b6/0x1600 [ 153.683273][ C0] tun_chr_close+0x108/0x1b0 [ 153.687905][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 153.687933][ T6059] loop3: detected capacity change from 0 to 1024 [ 153.693094][ C0] __fput+0x24a/0x8a0 [ 153.693178][ C0] task_work_run+0x24f/0x310 [ 153.693211][ C0] ? __pfx_task_work_run+0x10/0x10 [ 153.693241][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 153.693282][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 153.693322][ C0] do_syscall_64+0x100/0x230 [ 153.693345][ C0] ? clear_bhb_loop+0x35/0x90 [ 153.693376][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.693416][ C0] RIP: 0033:0x7fb3ead75bd9 [ 153.744748][ C0] RSP: 002b:00007ffd77363238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 153.753566][ C0] RAX: 0000000000000000 RBX: 00007fb3eaf05a60 RCX: 00007fb3ead75bd9 [ 153.761639][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 153.769709][ C0] RBP: 00007fb3eaf05a60 R08: 0000000000000006 R09: 0000000c7736356f [ 153.777726][ C0] R10: 00000000005efa78 R11: 0000000000000246 R12: 0000000000023fd9 [ 153.785907][ C0] R13: 0000000000000032 R14: 00007fb3eaf05a60 R15: 00007ffd77363320 [ 153.793995][ C0] [ 153.797392][ C0] DEBUG: waiting rtnl_mutex for 511 jiffies. [ 153.803462][ C0] task:kworker/1:3 state:D stack:23192 pid:5108 tgid:5108 ppid:2 flags:0x00004000 [ 153.813719][ C0] Workqueue: events linkwatch_event [ 153.819021][ C0] Call Trace: [ 153.822329][ C0] [ 153.825291][ C0] __schedule+0x1800/0x4a60 [ 153.829891][ C0] ? __pfx___schedule+0x10/0x10 [ 153.834757][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.840820][ C0] ? __pfx_lock_release+0x10/0x10 [ 153.845887][ C0] ? kick_pool+0x1bd/0x620 [ 153.850401][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.855637][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 153.860928][ C0] ? schedule+0x90/0x320 [ 153.865252][ C0] schedule+0x14b/0x320 [ 153.869508][ C0] schedule_preempt_disabled+0x13/0x30 [ 153.875017][ C0] __mutex_lock+0x6a4/0xd70 [ 153.879633][ C0] ? __mutex_lock+0x527/0xd70 [ 153.884350][ C0] ? linkwatch_event+0xe/0x60 [ 153.889107][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 153.894183][ C0] ? get_rtnl_holder+0x144/0x190 [ 153.899205][ C0] ? process_scheduled_works+0x945/0x1830 [ 153.904967][ C0] linkwatch_event+0xe/0x60 [ 153.909555][ C0] process_scheduled_works+0xa2c/0x1830 [ 153.915157][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.921257][ C0] ? assign_work+0x364/0x3d0 [ 153.925906][ C0] worker_thread+0x86d/0xd40 [ 153.930585][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 153.936513][ C0] ? __kthread_parkme+0x169/0x1d0 [ 153.941664][ C0] ? __pfx_worker_thread+0x10/0x10 [ 153.946836][ C0] kthread+0x2f0/0x390 [ 153.951000][ C0] ? __pfx_worker_thread+0x10/0x10 [ 153.956133][ C0] ? __pfx_kthread+0x10/0x10 [ 153.960851][ C0] ret_from_fork+0x4b/0x80 [ 153.965330][ C0] ? __pfx_kthread+0x10/0x10 [ 153.970043][ C0] ret_from_fork_asm+0x1a/0x30 [ 153.975007][ C0] [ 153.978069][ C0] [ 153.978069][ C0] Showing all locks held in the system: [ 153.985866][ C0] 2 locks held by kworker/u8:8/2445: [ 153.991531][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 154.003356][ C0] #1: ffffc90009137d00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 154.014491][ C0] 2 locks held by kworker/u8:11/2809: [ 154.019929][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 154.031720][ C0] #1: ffffc90009617d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 154.042577][ C0] 1 lock held by klogd/4540: [ 154.047197][ C0] #0: ffff8880b953ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 154.057253][ C0] 2 locks held by getty/4857: [ 154.062009][ C0] #0: ffff88802aa0e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 154.071890][ C0] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 154.082103][ C0] 3 locks held by kworker/1:3/5108: [ 154.087348][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 154.098440][ C0] #1: ffffc900037dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 154.109616][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 154.118886][ C0] 2 locks held by syz.0.191/6006: [ 154.124000][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 154.133089][ C0] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 154.144103][ C0] 1 lock held by syz.4.209/6061: [ 154.149107][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 154.158692][ C0] 2 locks held by syz.2.210/6062: [ 154.163802][ C0] #0: ffffc90002fcfb40 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 154.174023][ C0] #1: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 154.183977][ C0] [ 154.186316][ C0] ============================================= [ 154.186316][ C0] [ 154.477444][ T6067] evm: overlay not supported [ 154.759826][ T29] audit: type=1800 audit(1720205111.673:8): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.208" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 155.229103][ C0] DEBUG: holding rtnl_mutex for 681 jiffies. [ 155.235086][ T25] usb 2-1: USB disconnect, device number 2 [ 155.235424][ C0] task:syz.0.191 state:R running task stack:24672 pid:6006 tgid:6006 ppid:5346 flags:0x00004006 [ 155.253148][ C0] Call Trace: [ 155.256461][ C0] [ 155.259471][ C0] ? __pfx_lock_release+0x10/0x10 [ 155.264588][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.270599][ C0] ? schedule+0x90/0x320 [ 155.274979][ C0] ? schedule+0x14b/0x320 [ 155.279400][ C0] ? synchronize_rcu_expedited+0x684/0x830 [ 155.285262][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 155.291529][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 155.296959][ C0] ? __pfx___might_resched+0x10/0x10 [ 155.302414][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.308436][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 155.314588][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.321025][ C0] ? synchronize_rcu+0x11b/0x360 [ 155.326018][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 155.331423][ C0] ? lockdep_unregister_key+0x556/0x610 [ 155.337020][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 155.342991][ C0] ? pfifo_fast_destroy+0x86/0xe0 [ 155.348054][ C0] ? __qdisc_destroy+0x150/0x410 [ 155.353086][ C0] ? rcu_is_watching+0x15/0xb0 [ 155.357898][ C0] ? __qdisc_destroy+0x150/0x410 [ 155.362930][ C0] ? kfree+0x4e/0x360 [ 155.366985][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 155.372622][ C0] ? __qdisc_destroy+0x165/0x410 [ 155.377597][ C0] ? dev_shutdown+0x9b/0x440 [ 155.382270][ C0] ? unregister_netdevice_many_notify+0x9c7/0x1d20 [ 155.388844][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 155.395708][ C0] ? mark_lock+0x9a/0x360 [ 155.400128][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.406153][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.412653][ C0] ? queue_delayed_work_on+0x1eb/0x390 [ 155.418153][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 155.423454][ C0] ? unregister_netdevice_queue+0x303/0x370 [ 155.429428][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 155.435731][ C0] ? __tun_detach+0x6b6/0x1600 [ 155.440600][ C0] ? tun_chr_close+0x108/0x1b0 [ 155.445401][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 155.450594][ C0] ? __fput+0x24a/0x8a0 [ 155.454813][ C0] ? task_work_run+0x24f/0x310 [ 155.459757][ C0] ? __pfx_task_work_run+0x10/0x10 [ 155.464922][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 155.470742][ C0] ? syscall_exit_to_user_mode+0x168/0x370 [ 155.476603][ C0] ? do_syscall_64+0x100/0x230 [ 155.481447][ C0] ? clear_bhb_loop+0x35/0x90 [ 155.486175][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.492352][ C0] [ 155.495403][ C0] DEBUG: waiting rtnl_mutex for 681 jiffies. [ 155.501461][ C0] task:kworker/1:3 state:D stack:23192 pid:5108 tgid:5108 ppid:2 flags:0x00004000 [ 155.511717][ C0] Workqueue: events linkwatch_event [ 155.516973][ C0] Call Trace: [ 155.520349][ C0] [ 155.523331][ C0] __schedule+0x1800/0x4a60 [ 155.527918][ C0] ? __pfx___schedule+0x10/0x10 [ 155.532889][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.539032][ C0] ? __pfx_lock_release+0x10/0x10 [ 155.544106][ C0] ? kick_pool+0x1bd/0x620 [ 155.548579][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.553987][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 155.559273][ C0] ? schedule+0x90/0x320 [ 155.563565][ C0] schedule+0x14b/0x320 [ 155.567767][ C0] schedule_preempt_disabled+0x13/0x30 [ 155.573342][ C0] __mutex_lock+0x6a4/0xd70 [ 155.577911][ C0] ? __mutex_lock+0x527/0xd70 [ 155.582698][ C0] ? linkwatch_event+0xe/0x60 [ 155.587418][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 155.592576][ C0] ? get_rtnl_holder+0x144/0x190 [ 155.597561][ C0] ? process_scheduled_works+0x945/0x1830 [ 155.603393][ C0] linkwatch_event+0xe/0x60 [ 155.607959][ C0] process_scheduled_works+0xa2c/0x1830 [ 155.613634][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.619710][ C0] ? assign_work+0x364/0x3d0 [ 155.624362][ C0] worker_thread+0x86d/0xd40 [ 155.629154][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.635099][ C0] ? __kthread_parkme+0x169/0x1d0 [ 155.640236][ C0] ? __pfx_worker_thread+0x10/0x10 [ 155.645397][ C0] kthread+0x2f0/0x390 [ 155.649580][ C0] ? __pfx_worker_thread+0x10/0x10 [ 155.654742][ C0] ? __pfx_kthread+0x10/0x10 [ 155.659438][ C0] ret_from_fork+0x4b/0x80 [ 155.663922][ C0] ? __pfx_kthread+0x10/0x10 [ 155.668569][ C0] ret_from_fork_asm+0x1a/0x30 [ 155.673475][ C0] [ 155.676563][ C0] [ 155.676563][ C0] Showing all locks held in the system: [ 155.684400][ C0] 3 locks held by udevd/4551: [ 155.689146][ C0] #0: ffffffff8e9c8b90 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x204/0x500 [ 155.699551][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 155.709771][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 155.719770][ C0] 2 locks held by getty/4857: [ 155.724481][ C0] #0: ffff88802aa0e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 155.734399][ C0] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 155.744720][ C0] 3 locks held by kworker/1:3/5108: [ 155.750011][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 155.761111][ C0] #1: ffffc900037dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 155.772236][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 155.781356][ C0] 2 locks held by syz.0.191/6006: [ 155.786417][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 155.795525][ C0] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 155.806543][ C0] 1 lock held by syz.4.209/6061: [ 155.811574][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 155.819752][ T6072] loop3: detected capacity change from 0 to 32768 [ 155.821200][ C0] 5 locks held by syz.3.211/6072: [ 155.831486][ T6072] btrfs: Deprecated parameter 'usebackuproot' [ 155.832671][ C0] [ 155.841102][ C0] ============================================= [ 155.841102][ C0] [ 155.843641][ T6072] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.898236][ T6072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.211 (6072) [ 155.976575][ T6072] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.990392][ T6072] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 156.067820][ T5162] ================================================================== [ 156.075959][ T5162] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x152b/0x1750 [ 156.085029][ T5162] Read of size 2 at addr ffff88806e6e65c4 by task kworker/1:8/5162 [ 156.092950][ T5162] [ 156.095319][ T5162] CPU: 1 UID: 0 PID: 5162 Comm: kworker/1:8 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 156.105604][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 156.113166][ T6092] loop1: detected capacity change from 0 to 2048 [ 156.115667][ T5162] Workqueue: events nf_tables_trans_destroy_work [ 156.128400][ T5162] Call Trace: [ 156.131714][ T5162] [ 156.134670][ T5162] dump_stack_lvl+0x241/0x360 [ 156.139394][ T5162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.144632][ T5162] ? __pfx__printk+0x10/0x10 [ 156.149250][ T5162] ? _printk+0xd5/0x120 [ 156.153435][ T5162] ? __virt_addr_valid+0x183/0x530 [ 156.158561][ T5162] ? __virt_addr_valid+0x183/0x530 [ 156.163687][ T5162] print_report+0x169/0x550 [ 156.168205][ T5162] ? __virt_addr_valid+0x183/0x530 [ 156.173328][ T5162] ? __virt_addr_valid+0x183/0x530 [ 156.178447][ T5162] ? __virt_addr_valid+0x45f/0x530 [ 156.183568][ T5162] ? __phys_addr+0xba/0x170 [ 156.188085][ T5162] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 156.194363][ T5162] kasan_report+0x143/0x180 [ 156.199000][ T5162] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 156.205290][ T5162] nf_tables_trans_destroy_work+0x152b/0x1750 [ 156.211422][ T5162] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 156.217948][ T5162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.223960][ T5162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.230315][ T5162] ? process_scheduled_works+0x945/0x1830 [ 156.236050][ T5162] process_scheduled_works+0xa2c/0x1830 [ 156.241632][ T5162] ? __pfx_process_scheduled_works+0x10/0x10 [ 156.247626][ T5162] ? assign_work+0x364/0x3d0 [ 156.252239][ T5162] worker_thread+0x86d/0xd40 [ 156.256847][ T5162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.262761][ T5162] ? __kthread_parkme+0x169/0x1d0 [ 156.267808][ T5162] ? __pfx_worker_thread+0x10/0x10 [ 156.272939][ T5162] kthread+0x2f0/0x390 [ 156.277053][ T5162] ? __pfx_worker_thread+0x10/0x10 [ 156.282200][ T5162] ? __pfx_kthread+0x10/0x10 [ 156.286809][ T5162] ret_from_fork+0x4b/0x80 [ 156.291241][ T5162] ? __pfx_kthread+0x10/0x10 [ 156.295845][ T5162] ret_from_fork_asm+0x1a/0x30 [ 156.300629][ T5162] [ 156.303648][ T5162] [ 156.305996][ T5162] Allocated by task 6082: [ 156.310322][ T5162] kasan_save_track+0x3f/0x80 [ 156.315008][ T5162] __kasan_kmalloc+0x98/0xb0 [ 156.319610][ T5162] __kmalloc_cache_noprof+0x19c/0x2c0 [ 156.325018][ T5162] nf_tables_newtable+0x52e/0x1dc0 [ 156.330145][ T5162] nfnetlink_rcv+0x1427/0x2a90 [ 156.335006][ T5162] netlink_unicast+0x7f0/0x990 [ 156.339779][ T5162] netlink_sendmsg+0x8e4/0xcb0 [ 156.344561][ T5162] __sock_sendmsg+0x221/0x270 [ 156.349267][ T5162] ____sys_sendmsg+0x525/0x7d0 [ 156.354039][ T5162] __sys_sendmsg+0x2b0/0x3a0 [ 156.358643][ T5162] do_syscall_64+0xf3/0x230 [ 156.363170][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.369157][ T5162] [ 156.371574][ T5162] Freed by task 6080: [ 156.375548][ T5162] kasan_save_track+0x3f/0x80 [ 156.380231][ T5162] kasan_save_free_info+0x40/0x50 [ 156.385272][ T5162] poison_slab_object+0xe0/0x150 [ 156.390214][ T5162] __kasan_slab_free+0x37/0x60 [ 156.394978][ T5162] kfree+0x149/0x360 [ 156.398886][ T5162] __nft_release_table+0xe80/0xf40 [ 156.404015][ T5162] nft_rcv_nl_event+0x55f/0x6d0 [ 156.408878][ T5162] notifier_call_chain+0x19f/0x3e0 [ 156.414002][ T5162] blocking_notifier_call_chain+0x69/0x90 [ 156.419744][ T5162] netlink_release+0x11a6/0x1b10 [ 156.424682][ T5162] sock_close+0xbc/0x240 [ 156.429025][ T5162] __fput+0x24a/0x8a0 [ 156.433028][ T5162] task_work_run+0x24f/0x310 [ 156.437624][ T5162] syscall_exit_to_user_mode+0x168/0x370 [ 156.443274][ T5162] do_syscall_64+0x100/0x230 [ 156.447866][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.453760][ T5162] [ 156.456091][ T5162] Last potentially related work creation: [ 156.461802][ T5162] kasan_save_stack+0x3f/0x60 [ 156.466482][ T5162] __kasan_record_aux_stack+0xac/0xc0 [ 156.471880][ T5162] insert_work+0x3e/0x330 [ 156.476215][ T5162] __queue_work+0xc16/0xee0 [ 156.480726][ T5162] queue_work_on+0x1c2/0x380 [ 156.485319][ T5162] rhltable_remove+0x1097/0x1160 [ 156.490260][ T5162] __nft_release_table+0xc57/0xf40 [ 156.495375][ T5162] nft_rcv_nl_event+0x55f/0x6d0 [ 156.500233][ T5162] notifier_call_chain+0x19f/0x3e0 [ 156.505355][ T5162] blocking_notifier_call_chain+0x69/0x90 [ 156.511085][ T5162] netlink_release+0x11a6/0x1b10 [ 156.516021][ T5162] sock_close+0xbc/0x240 [ 156.520277][ T5162] __fput+0x24a/0x8a0 [ 156.524270][ T5162] task_work_run+0x24f/0x310 [ 156.528857][ T5162] syscall_exit_to_user_mode+0x168/0x370 [ 156.534496][ T5162] do_syscall_64+0x100/0x230 [ 156.539088][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.544981][ T5162] [ 156.547299][ T5162] The buggy address belongs to the object at ffff88806e6e6400 [ 156.547299][ T5162] which belongs to the cache kmalloc-cg-512 of size 512 [ 156.561612][ T5162] The buggy address is located 452 bytes inside of [ 156.561612][ T5162] freed 512-byte region [ffff88806e6e6400, ffff88806e6e6600) [ 156.575405][ T5162] [ 156.577724][ T5162] The buggy address belongs to the physical page: [ 156.584137][ T5162] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e6e4 [ 156.592903][ T5162] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.601406][ T5162] memcg:ffff88807dc2db01 [ 156.605731][ T5162] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.613301][ T5162] page_type: 0xfdffffff(slab) [ 156.617978][ T5162] raw: 00fff00000000040 ffff88801504f140 dead000000000122 0000000000000000 [ 156.626565][ T5162] raw: 0000000000000000 0000000080100010 00000001fdffffff ffff88807dc2db01 [ 156.635151][ T5162] head: 00fff00000000040 ffff88801504f140 dead000000000122 0000000000000000 [ 156.643824][ T5162] head: 0000000000000000 0000000080100010 00000001fdffffff ffff88807dc2db01 [ 156.652493][ T5162] head: 00fff00000000002 ffffea0001b9b901 ffffffffffffffff 0000000000000000 [ 156.661160][ T5162] head: ffff888000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 156.669827][ T5162] page dumped because: kasan: bad access detected [ 156.676248][ T5162] page_owner tracks the page as allocated [ 156.681959][ T5162] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4540, tgid 4540 (klogd), ts 155868263560, free_ts 150170198618 [ 156.704274][ T5162] post_alloc_hook+0x1f3/0x230 [ 156.709049][ T5162] get_page_from_freelist+0x2ccb/0x2d80 [ 156.714606][ T5162] __alloc_pages_noprof+0x256/0x6c0 [ 156.719814][ T5162] alloc_slab_page+0x5f/0x120 [ 156.724492][ T5162] allocate_slab+0x5a/0x2f0 [ 156.728999][ T5162] ___slab_alloc+0xcd1/0x14b0 [ 156.733689][ T5162] __slab_alloc+0x58/0xa0 [ 156.738017][ T5162] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 156.744443][ T5162] kmalloc_reserve+0x111/0x2a0 [ 156.749208][ T5162] __alloc_skb+0x1f3/0x440 [ 156.753623][ T5162] alloc_skb_with_frags+0xc3/0x770 [ 156.758733][ T5162] sock_alloc_send_pskb+0x91a/0xa60 [ 156.763938][ T5162] unix_dgram_sendmsg+0x6d3/0x1f80 [ 156.769064][ T5162] __sock_sendmsg+0x221/0x270 [ 156.773750][ T5162] __sys_sendto+0x3a4/0x4f0 [ 156.778251][ T5162] __x64_sys_sendto+0xde/0x100 [ 156.783017][ T5162] page last free pid 5162 tgid 5162 stack trace: [ 156.789342][ T5162] free_unref_page+0xd22/0xea0 [ 156.794114][ T5162] stack_depot_save_flags+0x6f6/0x830 [ 156.799495][ T5162] kasan_save_track+0x51/0x80 [ 156.804174][ T5162] __kasan_slab_alloc+0x66/0x80 [ 156.809029][ T5162] kmem_cache_alloc_noprof+0x135/0x2a0 [ 156.814502][ T5162] __kernfs_new_node+0xd8/0x870 [ 156.819355][ T5162] kernfs_new_node+0x137/0x240 [ 156.824135][ T5162] kernfs_create_dir_ns+0x43/0x120 [ 156.829257][ T5162] sysfs_create_dir_ns+0x189/0x3a0 [ 156.834387][ T5162] kobject_add_internal+0x435/0x8d0 [ 156.839588][ T5162] kobject_add+0x152/0x220 [ 156.844011][ T5162] device_add+0x4e5/0xbf0 [ 156.848343][ T5162] usb_serial_probe+0x2988/0x3070 [ 156.853373][ T5162] usb_probe_interface+0x645/0xbb0 [ 156.858480][ T5162] really_probe+0x2b8/0xad0 [ 156.862984][ T5162] __driver_probe_device+0x1a2/0x390 [ 156.868283][ T5162] [ 156.870606][ T5162] Memory state around the buggy address: [ 156.876243][ T5162] ffff88806e6e6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.884330][ T5162] ffff88806e6e6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.892475][ T5162] >ffff88806e6e6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.900529][ T5162] ^ [ 156.906764][ T5162] ffff88806e6e6600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.909094][ C0] DEBUG: holding rtnl_mutex for 849 jiffies. [ 156.914822][ T5162] ffff88806e6e6680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.921002][ C0] task:syz.0.191 state:D [ 156.929012][ T5162] ================================================================== [ 156.942004][ C0] stack:24672 pid:6006 tgid:6006 ppid:5346 flags:0x00004006 [ 156.949805][ C0] Call Trace: [ 156.953120][ C0] [ 156.956086][ C0] __schedule+0x1800/0x4a60 [ 156.960719][ C0] ? __pfx___schedule+0x10/0x10 [ 156.965617][ C0] ? __pfx_lock_release+0x10/0x10 [ 156.970738][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.976703][ C0] ? schedule+0x90/0x320 [ 156.981042][ C0] schedule+0x14b/0x320 [ 156.985253][ C0] synchronize_rcu_expedited+0x684/0x830 [ 156.990993][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 156.992611][ T5162] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.992627][ T5162] CPU: 1 UID: 0 PID: 5162 Comm: kworker/1:8 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 156.992655][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 156.992671][ T5162] Workqueue: events nf_tables_trans_destroy_work [ 156.992708][ T5162] Call Trace: [ 156.992719][ T5162] [ 156.992728][ T5162] dump_stack_lvl+0x241/0x360 [ 156.992767][ T5162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.992801][ T5162] ? __pfx__printk+0x10/0x10 [ 156.992834][ T5162] ? preempt_schedule+0xe1/0xf0 [ 156.992865][ T5162] ? vscnprintf+0x5d/0x90 [ 156.992891][ T5162] panic+0x349/0x870 [ 156.992924][ T5162] ? check_panic_on_warn+0x21/0xb0 [ 156.992960][ T5162] ? __pfx_panic+0x10/0x10 [ 156.992995][ T5162] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 156.993030][ T5162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.993058][ T5162] ? print_report+0x502/0x550 [ 156.993089][ T5162] check_panic_on_warn+0x86/0xb0 [ 156.993124][ T5162] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 156.993157][ T5162] end_report+0x77/0x160 [ 156.993184][ T5162] kasan_report+0x154/0x180 [ 156.993214][ T5162] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 156.993252][ T5162] nf_tables_trans_destroy_work+0x152b/0x1750 [ 156.993296][ T5162] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 156.993332][ T5162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.993364][ T5162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.993403][ T5162] ? process_scheduled_works+0x945/0x1830 [ 156.993430][ T5162] process_scheduled_works+0xa2c/0x1830 [ 156.993477][ T5162] ? __pfx_process_scheduled_works+0x10/0x10 [ 156.993511][ T5162] ? assign_work+0x364/0x3d0 [ 156.993541][ T5162] worker_thread+0x86d/0xd40 [ 156.993576][ T5162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.993606][ T5162] ? __kthread_parkme+0x169/0x1d0 [ 156.993637][ T5162] ? __pfx_worker_thread+0x10/0x10 [ 156.993666][ T5162] kthread+0x2f0/0x390 [ 156.993697][ T5162] ? __pfx_worker_thread+0x10/0x10 [ 156.993725][ T5162] ? __pfx_kthread+0x10/0x10 [ 156.993758][ T5162] ret_from_fork+0x4b/0x80 [ 156.993787][ T5162] ? __pfx_kthread+0x10/0x10 [ 156.993816][ T5162] ret_from_fork_asm+0x1a/0x30 [ 156.993859][ T5162] [ 156.997435][ T5162] Kernel Offset: disabled