last executing test programs: 1m51.623711801s ago: executing program 1 (id=74): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r3, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r3, 0x2, 0xd, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4001804) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8) 1m50.030816969s ago: executing program 1 (id=76): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r1 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r5, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000640)={[{@nodelalloc}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x33, 0x31, 0x31, 0x65, 0x63, 0x66, 0x61], 0x2d, [0x62, 0x33, 0x39, 0x30], 0x2d, [0x34, 0x38, 0x66, 0x33], 0x2d, [0x31, 0x69, 0x31, 0x32], 0x2d, [0x61, 0x36, 0x65, 0x30, 0x36, 0x39, 0x31, 0x34]}}}, {@uid_gt}, {@euid_eq}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0xfefffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x20000080) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) read$FUSE(r0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) 1m46.62212237s ago: executing program 1 (id=78): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xc00, &(0x7f0000000240)={[{}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.614587534s ago: executing program 1 (id=80): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 1m44.950241999s ago: executing program 1 (id=83): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1m42.051823278s ago: executing program 1 (id=88): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x0, 0x5, 0xf, 0x7, 0x25, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8, 0x4, 0x1}}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000c80)=ANY=[@ANYBLOB='time_offset=0x00000000000004f8,nocase,nodots,flush,allow_utime=00000000000000000077777,dots,dots,dots,quiet,dots,allow_utime=00000000000000000000011,check=strict,errors=remount-ro,fmask=00000000000000000120000,usefree,tz=UTC,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRES32=r3, @ANYBLOB="2866756e633d466d6561737172657758a5803d", @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB="ff07caa625b4e93b7c79cd553e937943cd41280d3244e168e8b32d201848657ed40451d0bade9b276a0039b4c1f2ed1f00388f15e21497f22e64118ada955e72c06817728b765436dacfff8245645075f76c71ace366adaccd53f01c644b1fa309c3c9220f7a60aa50f6a235d4d1b556f7f1ef0a17f80272857c95b4d1271ab51a13d383d3217a1d3b44762d02dce93e0ce9c2f2f7aab75484b97e62ffc5661793fd98d76801d7f937629d7e97751e7a05cb412d43bc8563d7950bf97fb29181e96884c42e72af8f52de9683b7d232"], 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) 1m39.474543509s ago: executing program 32 (id=88): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x0, 0x5, 0xf, 0x7, 0x25, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8, 0x4, 0x1}}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000c80)=ANY=[@ANYBLOB='time_offset=0x00000000000004f8,nocase,nodots,flush,allow_utime=00000000000000000077777,dots,dots,dots,quiet,dots,allow_utime=00000000000000000000011,check=strict,errors=remount-ro,fmask=00000000000000000120000,usefree,tz=UTC,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRES32=r3, @ANYBLOB="2866756e633d466d6561737172657758a5803d", @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB="ff07caa625b4e93b7c79cd553e937943cd41280d3244e168e8b32d201848657ed40451d0bade9b276a0039b4c1f2ed1f00388f15e21497f22e64118ada955e72c06817728b765436dacfff8245645075f76c71ace366adaccd53f01c644b1fa309c3c9220f7a60aa50f6a235d4d1b556f7f1ef0a17f80272857c95b4d1271ab51a13d383d3217a1d3b44762d02dce93e0ce9c2f2f7aab75484b97e62ffc5661793fd98d76801d7f937629d7e97751e7a05cb412d43bc8563d7950bf97fb29181e96884c42e72af8f52de9683b7d232"], 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) 1m3.0491434s ago: executing program 2 (id=152): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@namecase}, {@gid}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x109480, 0x18a) copy_file_range(r1, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x3df1, 0x0) 1m2.728453107s ago: executing program 2 (id=153): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000001c0)={[{@noblock_validity}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x7a1, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x23) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000180)={0x500, 0x10000002000003, 0x4}) 1m1.3598339s ago: executing program 2 (id=158): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r5, r4, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 57.660246027s ago: executing program 2 (id=167): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x8010, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRES32, @ANYRES64, @ANYRESOCT], 0x4, 0x2cc, &(0x7f0000000440)="$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") getpid() r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 56.901737765s ago: executing program 2 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x40800, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 56.414361987s ago: executing program 2 (id=177): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x200}, 0x2}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 55.923797038s ago: executing program 33 (id=177): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x200}, 0x2}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 39.026983998s ago: executing program 4 (id=222): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44849) tkill(r3, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), 0x0}, 0x20) 37.144403153s ago: executing program 4 (id=224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2a}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x141a82, 0x13) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) capset(&(0x7f0000000040)={0x20071026}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) capset(&(0x7f00000002c0)={0x20071026}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x3, 0x7fffffff8, 0x6048a57a, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1, 0x100000000], 0x0, 0x1983}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.682746853s ago: executing program 4 (id=226): timer_create(0x1, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 34.464775985s ago: executing program 4 (id=230): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000017c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") syz_clone(0x80000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183042, 0x15) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x37eb, 0x683) 28.585859495s ago: executing program 4 (id=243): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44849) tkill(r3, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), 0x0}, 0x20) 26.814323277s ago: executing program 4 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 26.321650109s ago: executing program 34 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 9.536388575s ago: executing program 5 (id=286): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44849) tkill(r3, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), 0x0}, 0x20) 9.306601681s ago: executing program 3 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 8.973668368s ago: executing program 3 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 8.686308865s ago: executing program 3 (id=289): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000002540)=ANY=[@ANYBLOB="400000008f0d03dd8211caeb24926ab5c6e6494bc6954bf7f13660504779c0efb1083936e43546966a1f9d42b76c9ac3f492c72b9522fb03a3fca74573d4d58bbbbb54d002012d2be3623837f672d82abdc34b67a81b9ecddf5a134eee6e440ee1e212eb45e0773aa8fb1ff26e1dfc9812dd783077ea56c4f915e6c9a3a0ea0f4972bddeb7102b43a6b8c618041fdd0c0edb20716a88d84f8df95987", @ANYRES16=r6, @ANYBLOB="200026bd7000ffdbdf250100000014000b00ff01000000000000000000000000000105000d000100000005000d001100000008"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x404c0c8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0x6, 0x6, 0xffff651f, 0x70, 0x15, "fcc573017ecd313d3c83480b9ab3be2e935318"}) tkill(r1, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000009b80)={0x40000012}) read$FUSE(r8, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r9, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x4800, 0x0, 0x4, 0x0, 0xb9a9, 0x9ce}) 7.20500799s ago: executing program 3 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 6.989784555s ago: executing program 3 (id=292): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x20000000) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 6.950255356s ago: executing program 6 (id=250): r0 = syz_open_dev$loop(&(0x7f0000000580), 0x4, 0x101002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 6.762438831s ago: executing program 6 (id=293): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x80002, 0x88) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) write(r0, &(0x7f0000000100), 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x10001, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./sys/bus/pci/rescan\x00', &(0x7f0000000140), 0x2000008, 0x0) 5.427876012s ago: executing program 3 (id=294): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000c80)=ANY=[@ANYBLOB='time_offset=0x00000000000004f8,nocase,nodots,flush,allow_utime=00000000000000000077777,dots,dots,dots,quiet,dots,allow_utime=00000000000000000000011,check=strict,errors=remount-ro,fmask=00000000000000000120000,usefree,tz=UTC,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRES32, @ANYBLOB="2866756e633d466d6561737172657758a5803d", @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB="ff07caa625b4e93b7c79cd553e937943cd41280d3244e168e8b32d201848657ed40451d0bade9b276a0039b4c1f2ed1f00388f15e21497f22e64118ada955e72c06817728b765436dacfff8245645075f76c71ace366adaccd53f01c644b1fa309c3c9220f7a60aa50f6a235d4d1b556f7f1ef0a17f80272857c95b4d1271ab51a13d383d3217a1d3b44762d02dce93e0ce9c2f2f7aab75484b97e62ffc5661793fd98d76801d7f937629d7e97751e7a05cb412d43bc8563d7950bf97fb29181e96884c42e72af8f52de9683b7d232"], 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 5.210467727s ago: executing program 0 (id=295): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)=0xd5) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x0, 0x104) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x6, 'dvmrp0\x00', {0x1}, 0xc}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.965332113s ago: executing program 5 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 4.019644795s ago: executing program 6 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 4.002577346s ago: executing program 0 (id=298): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000002540)=ANY=[@ANYBLOB="400000008f0d03dd8211caeb24926ab5c6e6494bc6954bf7f13660504779c0efb1083936e43546966a1f9d42b76c9ac3f492c72b9522fb03a3fca74573d4d58bbbbb54d002012d2be3623837f672d82abdc34b67a81b9ecddf5a134eee6e440ee1e212eb45e0773aa8fb1ff26e1dfc9812dd783077ea56c4f915e6c9a3a0ea0f4972bddeb7102b43a6b8c618041fdd0c0edb20716a88d84f8df95987", @ANYRES16=r6, @ANYBLOB="200026bd7000ffdbdf250100000014000b00ff01000000000000000000000000000105000d000100000005000d001100000008"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x404c0c8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0x6, 0x6, 0xffff651f, 0x70, 0x15, "fcc573017ecd313d3c83480b9ab3be2e935318"}) tkill(r1, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000009b80)={0x40000012}) read$FUSE(r8, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r9, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x4800, 0x0, 0x4, 0x0, 0xb9a9, 0x9ce}) 3.993942736s ago: executing program 5 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 3.670899574s ago: executing program 6 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 3.670325154s ago: executing program 5 (id=301): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noquota}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@noinit_itable}, {@journal_checksum}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) fallocate(r0, 0x10, 0x6, 0xca6) 2.793753294s ago: executing program 0 (id=302): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x20000000) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 2.661962608s ago: executing program 6 (id=303): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1.72489035s ago: executing program 0 (id=304): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f00000002c0)={[{@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@utf8}, {@fat=@nfs}, {@shortname_winnt}, {@numtail}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_win95}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@uni_xlate}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x0, 0x0, &(0x7f0000000d40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.619382362s ago: executing program 5 (id=305): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x80002, 0x88) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) write(r0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x10001, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./sys/bus/pci/rescan\x00', &(0x7f0000000140), 0x2000008, 0x0) 1.306591469s ago: executing program 0 (id=306): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) 1.165724843s ago: executing program 0 (id=307): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)=0xd5) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x0, 0x104) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x6, 'dvmrp0\x00', {0x1}, 0xc}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 794.963592ms ago: executing program 6 (id=308): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xb, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="0100", 0x2) 0s ago: executing program 5 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 84.413349][ T5760] cgroup: Unknown subsys name 'net' [ 84.546685][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.287144][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.256964][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.264837][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.273854][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.282108][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.290362][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.299132][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.306764][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.315359][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.323560][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.330984][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.338421][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.347074][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.350465][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.362516][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.370837][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.378677][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.386189][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.393367][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.404789][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.414849][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.423667][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.431232][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.440545][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.450084][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.944231][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.986795][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 89.142865][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 89.172294][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 89.220065][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.228154][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.235512][ T5778] bridge_slave_0: entered allmulticast mode [ 89.244204][ T5778] bridge_slave_0: entered promiscuous mode [ 89.292472][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.302548][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.310067][ T5778] bridge_slave_1: entered allmulticast mode [ 89.317260][ T5778] bridge_slave_1: entered promiscuous mode [ 89.335546][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.342842][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.350306][ T5774] bridge_slave_0: entered allmulticast mode [ 89.358091][ T5774] bridge_slave_0: entered promiscuous mode [ 89.366656][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.374112][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.382896][ T5774] bridge_slave_1: entered allmulticast mode [ 89.390433][ T5774] bridge_slave_1: entered promiscuous mode [ 89.499742][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.515704][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.525361][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.533953][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.541566][ T5782] bridge_slave_0: entered allmulticast mode [ 89.549274][ T5782] bridge_slave_0: entered promiscuous mode [ 89.566002][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.579637][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.590078][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.597329][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.604902][ T5782] bridge_slave_1: entered allmulticast mode [ 89.612546][ T5782] bridge_slave_1: entered promiscuous mode [ 89.667572][ T5778] team0: Port device team_slave_0 added [ 89.708028][ T5778] team0: Port device team_slave_1 added [ 89.727112][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.734532][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.742440][ T5773] bridge_slave_0: entered allmulticast mode [ 89.750564][ T5773] bridge_slave_0: entered promiscuous mode [ 89.761905][ T5774] team0: Port device team_slave_0 added [ 89.771651][ T5774] team0: Port device team_slave_1 added [ 89.802788][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.815598][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.825402][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.835211][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.843498][ T5773] bridge_slave_1: entered allmulticast mode [ 89.853009][ T5773] bridge_slave_1: entered promiscuous mode [ 89.872435][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.880346][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.907731][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.972898][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.980076][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.006397][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.042587][ T5782] team0: Port device team_slave_0 added [ 90.052475][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.067160][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.077050][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.084182][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.117156][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.130205][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.137214][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.163446][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.185551][ T5782] team0: Port device team_slave_1 added [ 90.229883][ T5773] team0: Port device team_slave_0 added [ 90.253125][ T5773] team0: Port device team_slave_1 added [ 90.285122][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.292292][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.318276][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.377319][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.384413][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.410527][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.425098][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.432189][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.458433][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.485144][ T5774] hsr_slave_0: entered promiscuous mode [ 90.495096][ T5774] hsr_slave_1: entered promiscuous mode [ 90.501894][ T5779] Bluetooth: hci1: command tx timeout [ 90.507834][ T51] Bluetooth: hci0: command tx timeout [ 90.508196][ T5779] Bluetooth: hci2: command tx timeout [ 90.513883][ T51] Bluetooth: hci3: command tx timeout [ 90.535545][ T5778] hsr_slave_0: entered promiscuous mode [ 90.542130][ T5778] hsr_slave_1: entered promiscuous mode [ 90.548832][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.556811][ T5778] Cannot create hsr debugfs directory [ 90.563116][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.570294][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.597123][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.673151][ T5782] hsr_slave_0: entered promiscuous mode [ 90.680930][ T5782] hsr_slave_1: entered promiscuous mode [ 90.687556][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.696155][ T5782] Cannot create hsr debugfs directory [ 90.751019][ T5773] hsr_slave_0: entered promiscuous mode [ 90.758011][ T5773] hsr_slave_1: entered promiscuous mode [ 90.767347][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.775079][ T5773] Cannot create hsr debugfs directory [ 91.270187][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.284950][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.297488][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.309826][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.406163][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.426598][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.447771][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.461696][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.565057][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.575768][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.590168][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.626164][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.739177][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.750668][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.764274][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.775735][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.793444][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.833053][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.877816][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.885278][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.972810][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.995136][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.002484][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.030827][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.049505][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.075277][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.082527][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.123509][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.130711][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.191002][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.211120][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.218366][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.264327][ T56] cfg80211: failed to load regulatory.db [ 92.310122][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.317356][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.363589][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.455528][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.522135][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.529414][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.574693][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.581999][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.595644][ T51] Bluetooth: hci3: command tx timeout [ 92.608169][ T5781] Bluetooth: hci2: command tx timeout [ 92.613686][ T5781] Bluetooth: hci0: command tx timeout [ 92.617861][ T51] Bluetooth: hci1: command tx timeout [ 92.831626][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.932888][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.001130][ T5774] veth0_vlan: entered promiscuous mode [ 93.053163][ T5774] veth1_vlan: entered promiscuous mode [ 93.091330][ T5773] veth0_vlan: entered promiscuous mode [ 93.145856][ T5773] veth1_vlan: entered promiscuous mode [ 93.174182][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.234792][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.246962][ T5774] veth0_macvtap: entered promiscuous mode [ 93.275549][ T5774] veth1_macvtap: entered promiscuous mode [ 93.314887][ T5773] veth0_macvtap: entered promiscuous mode [ 93.344966][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.354304][ T5773] veth1_macvtap: entered promiscuous mode [ 93.382702][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.411714][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.424753][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.438652][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.446189][ T5778] veth0_vlan: entered promiscuous mode [ 93.456881][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.470643][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.480581][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.489796][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.514634][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.525411][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.537292][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.572674][ T5778] veth1_vlan: entered promiscuous mode [ 93.580030][ T5782] veth0_vlan: entered promiscuous mode [ 93.589568][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.600303][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.609295][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.618627][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.690283][ T5782] veth1_vlan: entered promiscuous mode [ 93.774887][ T5778] veth0_macvtap: entered promiscuous mode [ 93.808640][ T5778] veth1_macvtap: entered promiscuous mode [ 93.855428][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.879387][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.898333][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.909322][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.920099][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.935533][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.947561][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.975325][ T5782] veth0_macvtap: entered promiscuous mode [ 93.986977][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.000955][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.011054][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.022467][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.035737][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.045969][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.061393][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.074287][ T5782] veth1_macvtap: entered promiscuous mode [ 94.122762][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.133780][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140878][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.149711][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.149861][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.149893][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.203494][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.215193][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.227203][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.243089][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.253929][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.265574][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.279914][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.327622][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.343416][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.353822][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.364844][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.375851][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.386796][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.400130][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.410363][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.421612][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.439823][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.450672][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.460459][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.469705][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.608849][ T5842] syz.0.1[5842]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.639715][ T5842] loop0: detected capacity change from 0 to 128 [ 94.655595][ T5842] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.668927][ T51] Bluetooth: hci0: command tx timeout [ 94.668948][ T5779] Bluetooth: hci3: command tx timeout [ 94.674401][ T51] Bluetooth: hci2: command tx timeout [ 94.681009][ T5781] Bluetooth: hci1: command tx timeout [ 94.698359][ T5842] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.767409][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.822302][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.953536][ T5845] loop2: detected capacity change from 0 to 512 [ 94.961537][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.991318][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.049020][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.057429][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.362195][ T5845] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.3: inode has both inline data and extents flags [ 95.972774][ T5845] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 96.016798][ T5845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.143881][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.192956][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.354833][ T5779] Bluetooth: hci3: command tx timeout [ 97.355169][ T5781] Bluetooth: hci1: command tx timeout [ 97.361437][ T5083] Bluetooth: hci2: command tx timeout [ 97.366365][ T5781] Bluetooth: hci0: command tx timeout [ 97.748999][ T5763] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.341737][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.452010][ T5763] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.473145][ T5763] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 98.499923][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.548356][ T5763] usb 4-1: config 0 descriptor?? [ 98.585488][ T5871] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7'. [ 98.648765][ T5870] loop0: detected capacity change from 0 to 4096 [ 98.668775][ T5870] EXT4-fs: inline encryption not supported [ 98.890700][ T5870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.170140][ T5870] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.378458][ T5870] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 99.463156][ T5870] System zones: 0-5 [ 99.524182][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.589348][ T5763] usbhid 4-1:0.0: can't add hid device: -71 [ 99.595797][ T5763] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.757509][ T5763] usb 4-1: USB disconnect, device number 2 [ 100.046749][ T27] audit: type=1800 audit(1787178855.164:2): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 100.957638][ C0] sched: RT throttling activated [ 101.131520][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.762445][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.776472][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.788702][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.814339][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.867846][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.894627][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.910617][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.924866][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.937224][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.950296][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.962886][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.973287][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.984314][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.121106][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 102.121147][ T5881] Zero length message leads to an empty skb [ 102.138115][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 102.277298][ T5899] loop0: detected capacity change from 0 to 512 [ 102.284928][ T5899] EXT4-fs: Ignoring removed i_version option [ 102.291350][ T5899] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.349897][ T5899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.452619][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.561058][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.649428][ T5910] loop0: detected capacity change from 0 to 512 [ 102.697784][ T5910] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.16: inode has both inline data and extents flags [ 102.748092][ T5910] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.16: couldn't read orphan inode 15 (err -117) [ 102.781866][ T8] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 102.800716][ T5910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.816022][ T8] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 102.845130][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 102.868304][ T27] audit: type=1800 audit(1787178857.994:3): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 102.879153][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.969918][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.166912][ T5914] loop0: detected capacity change from 0 to 128 [ 103.188915][ T5914] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.202799][ T5914] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.361654][ T8] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 103.407018][ T8] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 103.440951][ T8] input: failed to attach handler kbd to device input5, error: -5 [ 103.522211][ T8] usb 2-1: USB disconnect, device number 3 [ 103.772638][ T5918] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18'. [ 105.980255][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.490318][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.766888][ T5931] loop3: detected capacity change from 0 to 1024 [ 106.851562][ T5931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.999001][ T5938] loop0: detected capacity change from 0 to 1024 [ 107.026445][ T5938] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 107.050535][ T5938] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 107.073639][ T5938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.110418][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 107.127400][ T5941] vlan0: entered promiscuous mode [ 107.132804][ T5941] ifb0: entered promiscuous mode [ 107.330548][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.473300][ T5945] loop2: detected capacity change from 0 to 512 [ 107.586131][ T5945] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.23: corrupted in-inode xattr: invalid ea_ino [ 107.704225][ T5945] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.23: couldn't read orphan inode 15 (err -117) [ 107.781875][ T5945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.812654][ T5953] netlink: 96 bytes leftover after parsing attributes in process `syz.1.27'. [ 109.518648][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.892061][ T5963] 9pnet_fd: Insufficient options for proto=fd [ 110.127492][ T5965] 9pnet_fd: Insufficient options for proto=fd [ 110.671003][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.880083][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.889440][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.983830][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.119778][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.448115][ T5994] netlink: 96 bytes leftover after parsing attributes in process `syz.2.37'. [ 114.841732][ T5978] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.850851][ T5978] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.861113][ T5978] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.870167][ T5978] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.222683][ T5992] loop1: detected capacity change from 0 to 40427 [ 115.280078][ T5992] F2FS-fs (loop1): Unrecognized mount option "whint_mode=user-based" or missing value [ 115.361236][ T6004] 9pnet_fd: Insufficient options for proto=fd [ 115.482865][ T6008] 9pnet_fd: Insufficient options for proto=fd [ 115.664434][ T6010] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.765239][ T27] audit: type=1326 audit(1787178870.894:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.41" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7ffc0000 [ 115.818518][ T27] audit: type=1326 audit(1787178870.924:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.41" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7ffc0000 [ 115.887156][ T27] audit: type=1326 audit(1787178870.934:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.41" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff35d99e0d9 code=0x7ffc0000 [ 116.441592][ T6023] loop2: detected capacity change from 0 to 1024 [ 116.567040][ T6023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.701592][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.651397][ T27] audit: type=1804 audit(1787178872.774:7): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.45" name="/newroot/11/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 117.936369][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.284589][ T6033] netlink: 96 bytes leftover after parsing attributes in process `syz.2.47'. [ 118.690661][ T27] audit: type=1326 audit(1787178873.824:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.41" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7fc00000 [ 118.807387][ T27] audit: type=1326 audit(1787178873.824:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.41" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7fc00000 [ 118.883085][ T6037] loop1: detected capacity change from 0 to 512 [ 118.910498][ T6037] EXT4-fs: Ignoring removed bh option [ 118.925550][ T6037] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.938495][ T6037] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 118.948778][ T6037] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.48: Corrupt directory, running e2fsck is recommended [ 118.963996][ T6037] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 118.972866][ T6037] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.48: corrupted in-inode xattr: e_name out of bounds [ 118.996327][ T6037] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.48: couldn't read orphan inode 15 (err -117) [ 119.010394][ T6037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.139875][ T6040] 9pnet_fd: Insufficient options for proto=fd [ 119.213795][ T6042] 9pnet_fd: Insufficient options for proto=fd [ 119.715541][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.835849][ T27] audit: type=1326 audit(1787178875.964:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.3.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7ffc0000 [ 120.936511][ T27] audit: type=1326 audit(1787178875.964:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.3.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7ffc0000 [ 121.030037][ T27] audit: type=1326 audit(1787178875.994:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.3.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff35d99e0d9 code=0x7ffc0000 [ 122.448770][ T6071] 9pnet_fd: Insufficient options for proto=fd [ 122.653939][ T6073] 9pnet_fd: Insufficient options for proto=fd [ 124.969005][ T27] audit: type=1326 audit(1787178880.094:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.3.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7fc00000 [ 126.236337][ T27] audit: type=1326 audit(1787178880.094:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.3.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d99e0d9 code=0x7fc00000 [ 127.812674][ T27] audit: type=1326 audit(1787178882.944:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 127.904588][ T27] audit: type=1326 audit(1787178882.944:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 127.905878][ T6111] 9pnet_fd: Insufficient options for proto=fd [ 128.153118][ T27] audit: type=1326 audit(1787178882.944:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 128.213452][ T27] audit: type=1326 audit(1787178882.944:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 128.259256][ T27] audit: type=1326 audit(1787178882.944:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 128.287767][ T27] audit: type=1326 audit(1787178882.944:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 128.633238][ T6117] 9pnet_fd: Insufficient options for proto=fd [ 129.144609][ T27] audit: type=1326 audit(1787178882.944:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 129.207829][ T27] audit: type=1326 audit(1787178882.944:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 129.293229][ T27] audit: type=1326 audit(1787178882.944:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.69" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d919e0d9 code=0x7ffc0000 [ 132.166861][ T6137] loop1: detected capacity change from 0 to 512 [ 132.174614][ T6137] ext4: Unknown parameter 'fsuuid' [ 132.675069][ T5942] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.959340][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.967131][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.232425][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.239565][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.403793][ T6150] 9pnet_fd: Insufficient options for proto=fd [ 135.432533][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.493990][ T6152] loop1: detected capacity change from 0 to 512 [ 135.532341][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.544626][ T6154] 9pnet_fd: Insufficient options for proto=fd [ 135.550730][ T6152] ======================================================= [ 135.550730][ T6152] WARNING: The mand mount option has been deprecated and [ 135.550730][ T6152] and is ignored by this kernel. Remove the mand [ 135.550730][ T6152] option from the mount to silence this warning. [ 135.550730][ T6152] ======================================================= [ 135.578837][ T6152] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.662088][ T6152] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.717825][ T6152] EXT4-fs (loop1): 1 truncate cleaned up [ 135.725025][ T6152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.889462][ T6159] loop2: detected capacity change from 0 to 1024 [ 135.928148][ T6159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.042716][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.055240][ T5782] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 136.370823][ T6126] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.380050][ T6126] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.389217][ T6126] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.398449][ T6126] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.582010][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 136.810839][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.950361][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.989191][ T6173] loop2: detected capacity change from 0 to 512 [ 138.005406][ T6173] ext4: Unknown parameter 'fsuuid' [ 140.068422][ T5942] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.652949][ T6178] 9pnet_fd: Insufficient options for proto=fd [ 141.922400][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 142.009556][ T6192] bridge_slave_1 (unregistering): left allmulticast mode [ 142.016760][ T6192] bridge_slave_1 (unregistering): left promiscuous mode [ 142.023998][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.318113][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.325975][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.784480][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.795479][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.807581][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.827111][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.836254][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.849423][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.848341][ T6218] 9pnet_fd: Insufficient options for proto=fd [ 145.931224][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.951598][ T51] Bluetooth: hci3: command tx timeout [ 146.058497][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.083216][ T6222] loop3: detected capacity change from 0 to 512 [ 146.124979][ T6222] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 146.144207][ T6222] EXT4-fs (loop3): 1 truncate cleaned up [ 146.151957][ T6222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.273717][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.386701][ T6226] tmpfs: Cannot retroactively limit inodes [ 146.763452][ T6233] capability: warning: `syz.3.105' uses deprecated v2 capabilities in a way that may be insecure [ 147.221780][ T6197] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.230835][ T6197] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.239904][ T6197] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.249419][ T6197] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.046892][ T51] Bluetooth: hci3: command tx timeout [ 148.205168][ T6197] syz.2.94 (6197) used greatest stack depth: 20680 bytes left [ 149.448424][ T6253] loop0: detected capacity change from 0 to 512 [ 149.470195][ T6253] EXT4-fs: Ignoring removed orlov option [ 149.475965][ T6253] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.535411][ T6253] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 149.784284][ T6255] loop2: detected capacity change from 0 to 512 [ 149.797503][ T6255] ext4: Unknown parameter 'fsuuid' [ 150.098573][ T51] Bluetooth: hci3: command tx timeout [ 150.977908][ T5943] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.178005][ T51] Bluetooth: hci3: command tx timeout [ 152.679069][ T169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.932786][ T169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.961707][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 154.361041][ T6276] 9pnet_fd: Insufficient options for proto=fd [ 154.376081][ T169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.105378][ T169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.510041][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.605760][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.619202][ T6202] bridge_slave_0: entered allmulticast mode [ 156.626907][ T6202] bridge_slave_0: entered promiscuous mode [ 156.641303][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.654191][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.663438][ T6202] bridge_slave_1: entered allmulticast mode [ 156.674948][ T6202] bridge_slave_1: entered promiscuous mode [ 156.732296][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.751862][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.814729][ T6202] team0: Port device team_slave_0 added [ 156.831072][ T6202] team0: Port device team_slave_1 added [ 156.885455][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.920412][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.373727][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.427409][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.456866][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.559282][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.781822][ T6202] hsr_slave_0: entered promiscuous mode [ 157.789004][ T6202] hsr_slave_1: entered promiscuous mode [ 157.795704][ T6202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.803443][ T6202] Cannot create hsr debugfs directory [ 160.385331][ T6202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.493570][ T6202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.518230][ T6202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.540385][ T6202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.263907][ T6335] loop0: detected capacity change from 0 to 512 [ 162.309319][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.352281][ T6335] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 162.635527][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.669661][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.676887][ T5892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.719854][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.727171][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.868300][ T169] hsr_slave_0: left promiscuous mode [ 162.888412][ T169] hsr_slave_1: left promiscuous mode [ 162.918726][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.942793][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.958019][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.988390][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.025343][ T169] bridge_slave_1: left allmulticast mode [ 163.043486][ T169] bridge_slave_1: left promiscuous mode [ 163.072393][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.101144][ T169] bridge_slave_0: left allmulticast mode [ 163.106889][ T169] bridge_slave_0: left promiscuous mode [ 163.384328][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.040205][ T169] veth1_macvtap: left promiscuous mode [ 164.046306][ T169] veth0_macvtap: left promiscuous mode [ 164.057863][ T169] veth1_vlan: left promiscuous mode [ 164.064464][ T169] veth0_vlan: left promiscuous mode [ 166.425368][ T169] team0 (unregistering): Port device team_slave_1 removed [ 166.550689][ T169] team0 (unregistering): Port device team_slave_0 removed [ 166.701209][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.810865][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.510558][ T169] bond0 (unregistering): Released all slaves [ 169.069539][ T169] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 169.214292][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.585349][ T6372] loop3: detected capacity change from 0 to 40427 [ 170.627662][ T6372] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 170.646015][ T6372] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 170.690270][ T6372] F2FS-fs (loop3): Image doesn't support compression [ 170.711936][ T6372] F2FS-fs (loop3): Image doesn't support compression [ 170.794463][ T6372] F2FS-fs (loop3): invalid crc value [ 170.971588][ T6202] veth0_vlan: entered promiscuous mode [ 171.037015][ T6202] veth1_vlan: entered promiscuous mode [ 171.183814][ T6202] veth0_macvtap: entered promiscuous mode [ 171.216629][ T6202] veth1_macvtap: entered promiscuous mode [ 171.222372][ T6372] F2FS-fs (loop3): Start checkpoint disabled! [ 171.260047][ T6372] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 171.267457][ T6372] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 171.332353][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.380218][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.400148][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 171.422069][ T6202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.442093][ T6372] syz.3.135: attempt to access beyond end of device [ 171.442093][ T6372] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 171.443211][ T6202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.496624][ T6202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.512668][ T6372] syz.3.135: attempt to access beyond end of device [ 171.512668][ T6372] loop3: rw=0, sector=77952, nr_sectors = 8 limit=40427 [ 171.514887][ T6202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.640605][ T5819] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.652254][ T5819] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 171.676037][ T5892] kworker/u4:11: attempt to access beyond end of device [ 171.676037][ T5892] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.699314][ T5819] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.727118][ T5892] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 171.740808][ T5819] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 171.753011][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.764060][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.794140][ T5819] usb 1-1: Product: syz [ 171.798422][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.810661][ T5819] usb 1-1: Manufacturer: syz [ 171.815427][ T5819] usb 1-1: SerialNumber: syz [ 171.836347][ T6411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.875476][ T5819] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 171.896834][ T5819] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 171.910794][ T5819] usbserial_generic 1-1:1.0: generic converter detected [ 171.911296][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.952988][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.963723][ T5819] usb 1-1: generic converter now attached to ttyUSB0 [ 172.296380][ T6143] usb 1-1: USB disconnect, device number 2 [ 172.342545][ T6143] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 172.353270][ T6421] 9pnet_fd: Insufficient options for proto=fd [ 172.375724][ T6143] usbserial_generic 1-1:1.0: device disconnected [ 175.851581][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.860109][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.493112][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.509221][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.944576][ T6464] 9pnet_fd: Insufficient options for proto=fd [ 178.044973][ T6466] loop2: detected capacity change from 0 to 256 [ 178.063253][ T6431] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.064290][ T6466] exfat: Deprecated parameter 'namecase' [ 178.072545][ T6431] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.072584][ T6431] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.096711][ T6431] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.107859][ T6466] exfat: Deprecated parameter 'namecase' [ 178.157130][ T6466] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 178.242159][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 178.242178][ T27] audit: type=1804 audit(1787178933.374:83): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.152" name=2F6E6577726F6F742F33382FE91F7189591E9233614B2F627573 dev="loop2" ino=1048596 res=1 errno=0 [ 178.440831][ T6468] loop2: detected capacity change from 0 to 2048 [ 179.059000][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.250531][ T6468] EXT4-fs error (device loop2): ext4_ext_precache:657: inode #2: comm syz.2.153: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 179.695833][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.935897][ T6486] loop4: detected capacity change from 0 to 512 [ 179.999068][ T6486] ext4: Unknown parameter 'fsmagic' [ 180.088485][ T6490] 9pnet_fd: Insufficient options for proto=fd [ 180.369890][ T6498] loop3: detected capacity change from 0 to 1024 [ 180.396008][ T6498] EXT4-fs: Ignoring removed orlov option [ 180.468168][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.475430][ T5943] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.574989][ T6486] loop4: detected capacity change from 0 to 512 [ 180.652519][ T6486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.731487][ T6486] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 180.763875][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.506844][ T6522] loop2: detected capacity change from 0 to 128 [ 183.559766][ T6522] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.626720][ T6522] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.768505][ T6531] 9pnet_fd: Insufficient options for proto=fd [ 183.892345][ T6535] loop4: detected capacity change from 0 to 2048 [ 183.994001][ T6535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 184.043666][ T6543] loop0: detected capacity change from 0 to 512 [ 184.075130][ T6543] EXT4-fs: Ignoring removed i_version option [ 184.099535][ T6535] EXT4-fs (loop4): shut down requested (2) [ 184.121848][ T5773] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 184.130027][ T5773] FAT-fs (loop2): Filesystem has been set read-only [ 184.147009][ T5773] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 184.149830][ T6543] EXT4-fs: Ignoring removed bh option [ 184.275927][ T6202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 184.292409][ T6543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.359489][ T6543] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.528919][ T6536] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.754990][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.429126][ T6569] 9pnet_fd: Insufficient options for proto=fd [ 187.188203][ T6586] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.223279][ T6586] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.269975][ T6586] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.293681][ T6586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.302709][ T6605] loop4: detected capacity change from 0 to 128 [ 187.324305][ T6586] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.347299][ T6607] loop3: detected capacity change from 0 to 512 [ 187.390888][ T6586] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.395709][ T6607] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 187.429508][ T6605] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.448239][ T6605] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.460370][ T6586] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.466401][ T6586] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.535133][ T6586] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.668657][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.679897][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.692361][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.707492][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.727429][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.735172][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.899336][ T6614] 9pnet_fd: Insufficient options for proto=fd [ 188.287362][ T5892] hsr_slave_0: left promiscuous mode [ 188.308600][ T5892] hsr_slave_1: left promiscuous mode [ 188.324861][ T6202] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.343175][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.363674][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.399083][ T5892] bridge_slave_1: left allmulticast mode [ 188.404867][ T5892] bridge_slave_1: left promiscuous mode [ 188.411068][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.420709][ T5892] bridge_slave_0: left allmulticast mode [ 188.426602][ T5892] bridge_slave_0: left promiscuous mode [ 188.435771][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.488121][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 188.848025][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.297685][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.537792][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 189.539276][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.573637][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.595546][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.642782][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 189.670126][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.693699][ T8] usb 1-1: SerialNumber: syz [ 189.743813][ T8] usb 1-1: 0:2 : does not exist [ 189.857792][ T5781] Bluetooth: hci0: command tx timeout [ 190.340533][ T5892] team0 (unregistering): Port device team_slave_1 removed [ 190.427274][ T5892] team0 (unregistering): Port device team_slave_0 removed [ 190.482148][ T5892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.554654][ T5892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.616233][ T8] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 190.696127][ T8] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 190.726392][ T8] usb 1-1: USB disconnect, device number 3 [ 190.813749][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 190.903718][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.263969][ T5892] bond0 (unregistering): Released all slaves [ 191.382171][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.617787][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.655892][ T34] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 191.978350][ T5781] Bluetooth: hci0: command tx timeout [ 192.228581][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 192.595819][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.628455][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.652797][ T6589] bridge_slave_0: entered allmulticast mode [ 192.686053][ T6589] bridge_slave_0: entered promiscuous mode [ 192.706070][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.731335][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.750432][ T6589] bridge_slave_1: entered allmulticast mode [ 192.774310][ T6589] bridge_slave_1: entered promiscuous mode [ 192.901139][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.957873][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.989239][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.160842][ T6589] team0: Port device team_slave_0 added [ 193.196816][ T6589] team0: Port device team_slave_1 added [ 193.426221][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.451738][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.479133][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.532329][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.545482][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.580952][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.668366][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.706904][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.756616][ T6681] 9pnet_fd: p9_fd_create_unix (6681): problem connecting socket: ./file0: -111 [ 193.923782][ T6589] hsr_slave_0: entered promiscuous mode [ 193.968112][ T6589] hsr_slave_1: entered promiscuous mode [ 193.983881][ T6589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.994062][ T6589] Cannot create hsr debugfs directory [ 194.018075][ T5781] Bluetooth: hci0: command tx timeout [ 195.200623][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.207049][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.101242][ T5781] Bluetooth: hci0: command tx timeout [ 196.548962][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.566539][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.608300][ T6705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.783769][ T6705] syz.4.208 (6705) used greatest stack depth: 19208 bytes left [ 197.115648][ T6708] loop0: detected capacity change from 0 to 512 [ 197.123248][ T6708] ext4: Unknown parameter 'fsuuid' [ 198.210988][ T6589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.282512][ T6589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.348915][ T6589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.365975][ T6589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.806952][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.910200][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.942956][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.950291][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.009187][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.016422][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.706260][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.650790][ T6589] veth0_vlan: entered promiscuous mode [ 200.702173][ T6589] veth1_vlan: entered promiscuous mode [ 200.818650][ T6589] veth0_macvtap: entered promiscuous mode [ 200.857076][ T6589] veth1_macvtap: entered promiscuous mode [ 200.933495][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.026491][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.072235][ T6589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.108638][ T6589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.145775][ T6589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.177867][ T6589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.130131][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.209305][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.364811][ T6785] loop0: detected capacity change from 0 to 512 [ 203.208835][ T6785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.804186][ T6785] EXT4-fs (loop0): 1 truncate cleaned up [ 203.829229][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.909997][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.927739][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.266147][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.487336][ T6802] syz.4.226 (6802) used greatest stack depth: 17896 bytes left [ 210.553872][ T6870] loop5: detected capacity change from 0 to 4096 [ 210.602604][ T6870] EXT4-fs: inline encryption not supported [ 210.630109][ T6870] EXT4-fs: Ignoring removed oldalloc option [ 210.692838][ T6870] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.742061][ T6870] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 210.783626][ T6870] System zones: 0-5 [ 210.872166][ T6870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.290773][ T6857] loop4: detected capacity change from 0 to 40427 [ 211.373978][ T6857] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 211.418949][ T6857] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 211.489492][ T6870] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 211.539554][ T6881] overlayfs: failed to resolve './bus': -2 [ 211.564120][ T6857] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.647676][ T27] audit: type=1800 audit(1787178966.774:84): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.239" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 211.768202][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.866628][ T6589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.908098][ T6857] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 211.908133][ T6857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.145689][ T6857] syz.4.230: attempt to access beyond end of device [ 212.145689][ T6857] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 212.200028][ T6909] loop5: detected capacity change from 0 to 512 [ 212.239692][ T6909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.309521][ T6909] EXT4-fs (loop5): 1 truncate cleaned up [ 212.347152][ T6909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.410551][ T6202] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 212.438587][ T6202] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 212.456996][ T6202] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 212.464806][ T6202] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 212.472893][ T6202] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 212.493773][ T6202] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 212.502189][ T6202] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 212.660545][ T6589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.836274][ T6946] loop3: detected capacity change from 0 to 512 [ 214.868164][ T6946] EXT4-fs: Ignoring removed nobh option [ 214.893592][ T6946] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 214.927807][ T6946] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 214.968435][ T6946] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 215.020888][ T6946] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 215.039135][ T6946] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 215.047153][ T6946] EXT4-fs (loop3): failed to initialize system zone (-117) [ 215.068000][ T6946] EXT4-fs (loop3): mount failed [ 215.580028][ T6956] loop3: detected capacity change from 0 to 16 [ 215.885743][ T6956] erofs: (device loop3): mounted with root inode @ nid 36. [ 216.254932][ T6959] netlink: 260 bytes leftover after parsing attributes in process `syz.3.251'. [ 216.266887][ T6959] netlink: 68 bytes leftover after parsing attributes in process `syz.3.251'. [ 216.276399][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 216.757741][ T169] hsr_slave_0: left promiscuous mode [ 216.805598][ T169] hsr_slave_1: left promiscuous mode [ 216.895830][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.964493][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.008553][ T169] bridge_slave_1: left allmulticast mode [ 217.047939][ T169] bridge_slave_1: left promiscuous mode [ 217.053878][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.158819][ T169] bridge_slave_0: left allmulticast mode [ 217.164564][ T169] bridge_slave_0: left promiscuous mode [ 217.200948][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.539073][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.549958][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.558710][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.567725][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.576810][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.584472][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.755230][ T6981] loop3: detected capacity change from 0 to 512 [ 218.822291][ T6981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.874341][ T6981] EXT4-fs (loop3): 1 truncate cleaned up [ 218.893711][ T6981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.138027][ T169] team0 (unregistering): Port device team_slave_1 removed [ 219.195040][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.346374][ T169] team0 (unregistering): Port device team_slave_0 removed [ 219.430976][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.513144][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.618121][ T51] Bluetooth: hci3: command tx timeout [ 220.583425][ T6993] loop3: detected capacity change from 0 to 1024 [ 220.613423][ T6993] EXT4-fs: inline encryption not supported [ 220.669574][ T6993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.778482][ T169] bond0 (unregistering): Released all slaves [ 221.029590][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.404866][ T7007] 9pnet_fd: Insufficient options for proto=fd [ 221.500879][ T7011] loop5: detected capacity change from 0 to 128 [ 221.570504][ T5825] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 221.588325][ T7011] FAT-fs (loop5): Directory bread(block 162) failed [ 221.625077][ T7011] FAT-fs (loop5): Directory bread(block 163) failed [ 221.656872][ T6965] chnl_net:caif_netlink_parms(): no params data found [ 221.664183][ T7011] FAT-fs (loop5): Directory bread(block 164) failed [ 221.675370][ T7011] FAT-fs (loop5): Directory bread(block 165) failed [ 221.696004][ T7011] FAT-fs (loop5): Directory bread(block 166) failed [ 221.699428][ T51] Bluetooth: hci3: command tx timeout [ 221.719248][ T7011] FAT-fs (loop5): Directory bread(block 167) failed [ 221.726354][ T7011] FAT-fs (loop5): Directory bread(block 168) failed [ 221.733200][ T7011] FAT-fs (loop5): Directory bread(block 169) failed [ 221.740715][ T7011] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.763478][ T7011] FAT-fs (loop5): Directory bread(block 162) failed [ 221.770678][ T7011] FAT-fs (loop5): Directory bread(block 163) failed [ 221.780566][ T7011] syz.5.262: attempt to access beyond end of device [ 221.780566][ T7011] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 221.809142][ T7011] syz.5.262: attempt to access beyond end of device [ 221.809142][ T7011] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 221.823596][ T5825] usb 4-1: config index 0 descriptor too short (expected 201, got 100) [ 221.843736][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.882489][ T5825] usb 4-1: config 0 has no interfaces? [ 221.899704][ T5825] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.909492][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.917552][ T5825] usb 4-1: Product: syz [ 221.922505][ T5825] usb 4-1: Manufacturer: syz [ 221.927164][ T5825] usb 4-1: SerialNumber: syz [ 221.947905][ T5825] usb 4-1: config 0 descriptor?? [ 222.108816][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.136484][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.167896][ T6965] bridge_slave_0: entered allmulticast mode [ 222.189284][ T6965] bridge_slave_0: entered promiscuous mode [ 222.203393][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.214120][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.223789][ T6965] bridge_slave_1: entered allmulticast mode [ 222.243034][ T5825] usb 4-1: USB disconnect, device number 3 [ 222.254241][ T6965] bridge_slave_1: entered promiscuous mode [ 222.399972][ T6965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.425720][ T6965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.778668][ T51] Bluetooth: hci3: command tx timeout [ 224.768443][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.776232][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.055172][ T7045] loop0: detected capacity change from 0 to 512 [ 225.119301][ T7045] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 225.309847][ T7034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.457297][ T7034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.852187][ T7034] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.861253][ T7034] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.872075][ T7034] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.881038][ T7034] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.890078][ T51] Bluetooth: hci3: command tx timeout [ 226.128365][ T6965] team0: Port device team_slave_0 added [ 226.153063][ T6965] team0: Port device team_slave_1 added [ 226.206112][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.214108][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.253638][ T6965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.273545][ T7050] 9pnet_fd: Insufficient options for proto=fd [ 226.275699][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.299238][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.353653][ T6965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.496891][ T6965] hsr_slave_0: entered promiscuous mode [ 226.512231][ T6965] hsr_slave_1: entered promiscuous mode [ 226.536853][ T6965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.547641][ T6965] Cannot create hsr debugfs directory [ 226.686929][ T7060] loop3: detected capacity change from 0 to 256 [ 227.245901][ T6965] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.271970][ T6965] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.293346][ T6965] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.322578][ T6965] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.384663][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.443229][ T7082] 9pnet_fd: Insufficient options for proto=fd [ 228.482699][ T6965] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.536723][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.544012][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.611914][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.619221][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.836631][ T7091] loop3: detected capacity change from 0 to 16 [ 228.888152][ T7091] erofs: (device loop3): mounted with root inode @ nid 36. [ 228.952292][ T7091] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 229.007174][ T7091] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 229.054889][ T7091] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 229.336896][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.781588][ T6965] veth0_vlan: entered promiscuous mode [ 231.844972][ T6965] veth1_vlan: entered promiscuous mode [ 231.901459][ T7127] 9pnet_fd: Insufficient options for proto=fd [ 232.023600][ T6965] veth0_macvtap: entered promiscuous mode [ 232.084310][ T6965] veth1_macvtap: entered promiscuous mode [ 232.191242][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.240543][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.292591][ T6965] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.328240][ T6965] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.355833][ T6965] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.383489][ T1007] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 232.395226][ T6965] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.853687][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.883700][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.898910][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.918999][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.433146][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.450844][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.596364][ T7176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.261706][ T7190] loop5: detected capacity change from 0 to 1024 [ 238.338327][ T7190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.817951][ T27] audit: type=1800 audit(1787178993.924:85): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.301" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 239.246954][ T7200] loop3: detected capacity change from 0 to 512 [ 239.256849][ T7190] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.301: missing EA_INODE flag [ 239.320515][ T7190] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.301: error while reading EA inode 11 err=-117 [ 239.442963][ T6589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.467842][ T7208] loop0: detected capacity change from 0 to 256 [ 240.513250][ T7227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.971817][ T7229] ------------[ cut here ]------------ [ 240.978211][ T7229] skb_assert_len [ 241.058468][ T7229] WARNING: CPU: 1 PID: 7229 at include/linux/skbuff.h:2597 __dev_queue_xmit+0x1ec3/0x3630 [ 241.068636][ T7229] Modules linked in: [ 241.072593][ T7229] CPU: 1 PID: 7229 Comm: syz.6.308 Not tainted syzkaller #0 [ 241.080492][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.090998][ T7229] RIP: 0010:__dev_queue_xmit+0x1ec3/0x3630 [ 241.096890][ T7229] Code: df 4c 8b 6c 24 28 e9 10 e7 ff ff e8 17 30 04 f9 c6 05 da c2 f3 05 01 48 c7 c7 20 69 c4 8b 48 c7 c6 17 ab 9f 8c e8 bd fc cd f8 <0f> 0b 80 3d bf c2 f3 05 01 0f 84 0f e3 ff ff e8 e9 2f 04 f9 c6 05 [ 241.117215][ T7229] RSP: 0018:ffffc9000489f640 EFLAGS: 00010246 [ 241.123927][ T7229] RAX: 8e029004001e5b00 RBX: ffff8880316ea930 RCX: 0000000000080000 [ 241.132375][ T7229] RDX: ffffc9000bf19000 RSI: 000000000000531d RDI: 000000000000531e [ 241.141263][ T7229] RBP: ffffc9000489f890 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 241.149524][ T7229] R10: dffffc0000000000 R11: ffffed10171e518b R12: 1ffff110062dd51a [ 241.157618][ T7229] R13: 1ffff92000913ee8 R14: 0000000000000000 R15: dffffc0000000000 [ 241.165649][ T7229] FS: 00007f967ce356c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 241.175003][ T7229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.181887][ T7229] CR2: 00007f967bfeb7c0 CR3: 0000000062333000 CR4: 00000000003506e0 [ 241.190020][ T7229] Call Trace: [ 241.193350][ T7229] [ 241.196332][ T7229] ? alloc_skb_with_frags+0x6f5/0x7a0 [ 241.201853][ T7229] ? skb_set_owner_w+0x232/0x380 [ 241.206897][ T7229] ? netdev_core_pick_tx+0x370/0x370 [ 241.212313][ T7229] ? packet_parse_headers+0x7bd/0xad0 [ 241.218310][ T7229] ? packet_parse_headers+0x83e/0xad0 [ 241.223760][ T7229] ? sock_kzfree_s+0x50/0x50 [ 241.228761][ T7229] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 241.234387][ T7229] ? packet_xmit+0x66/0x340 [ 241.239037][ T7229] packet_sendmsg+0x2015/0x49a0 [ 241.244033][ T7229] ? packet_getsockopt+0xad0/0xad0 [ 241.249282][ T7229] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 241.255779][ T7229] ? apparmor_socket_sendmsg+0x8e/0x330 [ 241.261449][ T7229] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.266796][ T7229] ? security_socket_sendmsg+0x80/0xa0 [ 241.272461][ T7229] sock_write_iter+0x2dc/0x420 [ 241.277296][ T7229] ? sock_read_iter+0x3f0/0x3f0 [ 241.282255][ T7229] ? common_file_perm+0x198/0x1f0 [ 241.287700][ T7229] vfs_write+0x474/0x9a0 [ 241.292027][ T7229] ? file_end_write+0x250/0x250 [ 241.296948][ T7229] ? __fget_files+0x3fc/0x460 [ 241.302123][ T7229] ? __fdget_pos+0x1d8/0x330 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.306788][ T7229] ? ksys_write+0x74/0x260 [ 241.311366][ T7229] ksys_write+0x151/0x260 [ 241.315770][ T7229] ? __ia32_sys_read+0x90/0x90 [ 241.320693][ T7229] ? lockdep_hardirqs_on+0x98/0x150 [ 241.325969][ T7229] do_syscall_64+0x55/0xb0 [ 241.330502][ T7229] ? clear_bhb_loop+0x40/0x90 [ 241.335245][ T7229] ? clear_bhb_loop+0x40/0x90 [ 241.340055][ T7229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.346012][ T7229] RIP: 0033:0x7f967bf9e0d9 [ 241.350596][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.370394][ T7229] RSP: 002b:00007f967ce35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.379339][ T7229] RAX: ffffffffffffffda RBX: 00007f967c225fa0 RCX: 00007f967bf9e0d9 [ 241.387639][ T7229] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 241.395754][ T7229] RBP: 00007f967c035024 R08: 0000000000000000 R09: 0000000000000000 [ 241.403856][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.411936][ T7229] R13: 00007f967c226038 R14: 00007f967c225fa0 R15: 00007ffff7338d08 [ 241.420032][ T7229] [ 241.423109][ T7229] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.430451][ T7229] CPU: 1 PID: 7229 Comm: syz.6.308 Not tainted syzkaller #0 [ 241.437785][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.447893][ T7229] Call Trace: [ 241.451221][ T7229] [ 241.454199][ T7229] dump_stack_lvl+0x18c/0x250 [ 241.458955][ T7229] ? show_regs_print_info+0x20/0x20 [ 241.464190][ T7229] ? load_image+0x420/0x420 [ 241.468727][ T7229] panic+0x2ca/0x720 [ 241.472666][ T7229] ? bpf_jit_dump+0xd0/0xd0 [ 241.477220][ T7229] __warn+0x2e0/0x470 [ 241.481247][ T7229] ? __dev_queue_xmit+0x1ec3/0x3630 [ 241.486506][ T7229] ? __dev_queue_xmit+0x1ec3/0x3630 [ 241.491740][ T7229] report_bug+0x2be/0x4f0 [ 241.496113][ T7229] ? __dev_queue_xmit+0x1ec3/0x3630 [ 241.501348][ T7229] ? __dev_queue_xmit+0x1ec3/0x3630 [ 241.506590][ T7229] ? __dev_queue_xmit+0x1ec5/0x3630 [ 241.511828][ T7229] handle_bug+0xcf/0x120 [ 241.516387][ T7229] exc_invalid_op+0x1a/0x50 [ 241.520945][ T7229] asm_exc_invalid_op+0x1a/0x20 [ 241.525847][ T7229] RIP: 0010:__dev_queue_xmit+0x1ec3/0x3630 [ 241.531706][ T7229] Code: df 4c 8b 6c 24 28 e9 10 e7 ff ff e8 17 30 04 f9 c6 05 da c2 f3 05 01 48 c7 c7 20 69 c4 8b 48 c7 c6 17 ab 9f 8c e8 bd fc cd f8 <0f> 0b 80 3d bf c2 f3 05 01 0f 84 0f e3 ff ff e8 e9 2f 04 f9 c6 05 [ 241.551360][ T7229] RSP: 0018:ffffc9000489f640 EFLAGS: 00010246 [ 241.557460][ T7229] RAX: 8e029004001e5b00 RBX: ffff8880316ea930 RCX: 0000000000080000 [ 241.565470][ T7229] RDX: ffffc9000bf19000 RSI: 000000000000531d RDI: 000000000000531e [ 241.573469][ T7229] RBP: ffffc9000489f890 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 241.581474][ T7229] R10: dffffc0000000000 R11: ffffed10171e518b R12: 1ffff110062dd51a [ 241.589473][ T7229] R13: 1ffff92000913ee8 R14: 0000000000000000 R15: dffffc0000000000 [ 241.597496][ T7229] ? alloc_skb_with_frags+0x6f5/0x7a0 [ 241.602919][ T7229] ? skb_set_owner_w+0x232/0x380 [ 241.608081][ T7229] ? netdev_core_pick_tx+0x370/0x370 [ 241.613400][ T7229] ? packet_parse_headers+0x7bd/0xad0 [ 241.618799][ T7229] ? packet_parse_headers+0x83e/0xad0 [ 241.624218][ T7229] ? sock_kzfree_s+0x50/0x50 [ 241.628849][ T7229] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 241.634436][ T7229] ? packet_xmit+0x66/0x340 [ 241.638977][ T7229] packet_sendmsg+0x2015/0x49a0 [ 241.643901][ T7229] ? packet_getsockopt+0xad0/0xad0 [ 241.649042][ T7229] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 241.655501][ T7229] ? apparmor_socket_sendmsg+0x8e/0x330 [ 241.661073][ T7229] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.666388][ T7229] ? security_socket_sendmsg+0x80/0xa0 [ 241.671882][ T7229] sock_write_iter+0x2dc/0x420 [ 241.676686][ T7229] ? sock_read_iter+0x3f0/0x3f0 [ 241.681579][ T7229] ? common_file_perm+0x198/0x1f0 [ 241.686642][ T7229] vfs_write+0x474/0x9a0 [ 241.690928][ T7229] ? file_end_write+0x250/0x250 [ 241.695819][ T7229] ? __fget_files+0x3fc/0x460 [ 241.700544][ T7229] ? __fdget_pos+0x1d8/0x330 [ 241.705165][ T7229] ? ksys_write+0x74/0x260 [ 241.709630][ T7229] ksys_write+0x151/0x260 [ 241.714003][ T7229] ? __ia32_sys_read+0x90/0x90 [ 241.718801][ T7229] ? lockdep_hardirqs_on+0x98/0x150 [ 241.724044][ T7229] do_syscall_64+0x55/0xb0 [ 241.728505][ T7229] ? clear_bhb_loop+0x40/0x90 [ 241.733233][ T7229] ? clear_bhb_loop+0x40/0x90 [ 241.737950][ T7229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.743880][ T7229] RIP: 0033:0x7f967bf9e0d9 [ 241.748325][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.767968][ T7229] RSP: 002b:00007f967ce35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.776433][ T7229] RAX: ffffffffffffffda RBX: 00007f967c225fa0 RCX: 00007f967bf9e0d9 [ 241.784618][ T7229] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 241.792622][ T7229] RBP: 00007f967c035024 R08: 0000000000000000 R09: 0000000000000000 [ 241.800631][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.808632][ T7229] R13: 00007f967c226038 R14: 00007f967c225fa0 R15: 00007ffff7338d08 [ 241.816645][ T7229] [ 241.820288][ T7229] Kernel Offset: disabled [ 241.824740][ T7229] Rebooting in 86400 seconds..