last executing test programs: 9m32.962852596s ago: executing program 4 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) 9m29.770634963s ago: executing program 4 (id=136): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r1 = syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9m29.391849643s ago: executing program 4 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x315, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2df, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x5, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)={@multicast, @random="58a4ab044a92", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0xb0, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x400, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "4e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd82418", "80bdd625bd905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e1441af5775976715bf29ed4dcc166e", "7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738d", {"fdeca3693c5b2785e92ce602a669b6dd", "af8ff0acae2f2a3d0d0de9d22c2e3cf8"}}}}}}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0xd, 0x1}, 0x3, 0x800}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000700), 0x4) 9m21.205141518s ago: executing program 4 (id=152): r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r7}]}, 0x28}}, 0x0) 9m12.596516672s ago: executing program 4 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r2], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) 8m57.104145795s ago: executing program 32 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r2], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) 6m47.300193951s ago: executing program 1 (id=525): socket$nl_rdma(0x10, 0x3, 0x14) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) 6m45.176455744s ago: executing program 1 (id=529): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) socket(0x1d, 0x2, 0x6) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x4, @b={0x9, 0x2, 0x2, 0x1, 0xf8, 0xb, 0xd, {0x1, "1b"}, 0x3, 0x6, 0x5, 0x4, 0x1, "b4"}}, 0x12) 6m43.315913958s ago: executing program 1 (id=534): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x200000003, 0x86) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) pipe2(&(0x7f0000000080), 0x800) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x0, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index=0xfffffffc, 0x0, 0x7fffffff, 0x7, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 6m38.604359018s ago: executing program 1 (id=539): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x200088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 6m37.039136528s ago: executing program 1 (id=542): syz_emit_ethernet(0x71, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x3b, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x3b, 0x0, @opaque="02aadf0062dfafe40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062a872bc17357e2f456d36281ef64ef6"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r4, r4, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0xc0403d08, 0xffffffffffffffff) ioctl$SG_IO(r3, 0x2285, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000001a00)="00f4bcb66ade04ac39d0955b9112c0829f67cf2fc2298a0325d17c137eea601b08622e2620541f236159d69ed0a9d8fb959d9dde30cd9601b3115b8cf7812233cca61073540be7d5db6fc74cb06a1ba2e5055a95fc0b9986d1fa755ce65a7af45d765a217b1a17c60ade87a7a263c9b50cd51cd9c257c7418c3afc3a96dcadcb82618fec327d4d9dff17e795818e16acc77ddf7f6262e42bd84109d432d78971b582248e930ca6ca61945af075e5e68f97eeabaddb983078e95b8daf86895c883e09b3ce76b1e256eb0184d61fa61e476c7eef669ef439445643def8cc9381d9ad", 0xe1}], 0x2}, 0x0) 6m31.908982848s ago: executing program 1 (id=554): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xfffffffffffffffe}) 6m27.63080321s ago: executing program 2 (id=558): socket$nl_rdma(0x10, 0x3, 0x14) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) 6m26.697525445s ago: executing program 2 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) io_setup(0x281, &(0x7f0000000100)) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) 6m25.082854575s ago: executing program 2 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6m23.160721481s ago: executing program 2 (id=567): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 6m22.513082286s ago: executing program 2 (id=569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x20040010) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x7}}}, 0x24}}, 0x0) 6m19.640930481s ago: executing program 2 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4044) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00"}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0xda, 0x7fffffffffffffff, 0x0, 0x0, 0x14, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a019b5e287720c2af35239d2000000000000000000000000000000000000000400", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup3(r2, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6m16.527781755s ago: executing program 33 (id=554): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xfffffffffffffffe}) 6m4.360966068s ago: executing program 34 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4044) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00"}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0xda, 0x7fffffffffffffff, 0x0, 0x0, 0x14, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a019b5e287720c2af35239d2000000000000000000000000000000000000000400", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup3(r2, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4m13.195159734s ago: executing program 8 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f0000000040)) 3m57.332648493s ago: executing program 35 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f0000000040)) 2m37.398082685s ago: executing program 7 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(0x0, 0x80000000000000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206010900000000006000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e23000006000440000000000500010007000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) syz_open_dev$usbfs(0x0, 0x76, 0x101301) write$proc_mixer(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x33) close(0xffffffffffffffff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) msgsnd(0x0, 0x0, 0x0, 0x800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0810050008bb7746a0e90f49695e7e0c901da3af62aa79dfdb4a397325ac028bca9896fc14b5e5826a6a248630d162bb355a5370c749a5c085a18afee71c84c1c090a5567ec12708216cab6cfb82d031b46efe3a88ffffff7fce8928e80dc5bb75820957aa2d"], 0x24}}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, 0x0, 0x0) 2m35.52116752s ago: executing program 7 (id=1025): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) 2m34.015608972s ago: executing program 7 (id=1029): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 2m22.440562132s ago: executing program 7 (id=1052): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) setreuid(0xee00, 0xee01) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 2m21.588334495s ago: executing program 7 (id=1055): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) 2m20.383129378s ago: executing program 7 (id=1060): chdir(0x0) 2m19.030772618s ago: executing program 36 (id=1060): chdir(0x0) 1m43.631443287s ago: executing program 3 (id=1132): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xffffffff, 0x1, 0xffff, 0x2e3ab2ba, 0x474}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x9d, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m42.207621711s ago: executing program 3 (id=1136): ioperm(0x0, 0x6, 0x2da3b9f3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40805) 1m40.288804773s ago: executing program 3 (id=1138): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xd35, 0x0, &(0x7f00000001c0), 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r9, &(0x7f0000000000)="b8d2b38d5ed1de47a60d8128f1596940861bc74b9db65ba8", 0x18) epoll_create1(0x80000) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000e00), 0x12) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffff7ffbdbdf250500000008000600", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.817596253s ago: executing program 3 (id=1140): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m38.015814319s ago: executing program 3 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40008014}, 0x4004) 1m37.591282874s ago: executing program 6 (id=1147): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 1m37.172335912s ago: executing program 6 (id=1150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0xf88, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/222, 0xde, 0x1, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x37}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m36.112321036s ago: executing program 6 (id=1153): setreuid(0xee01, 0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x14, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}}, 0x0) 1m36.052598338s ago: executing program 3 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ufs\x00', 0x1000000, 0x0) 1m35.861069692s ago: executing program 6 (id=1155): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m34.691739417s ago: executing program 37 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ufs\x00', 0x1000000, 0x0) 1m34.638856077s ago: executing program 6 (id=1159): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000600)={'sha1-generic\x00'}}) prctl$PR_SET_NAME(0xf, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x68c01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1m33.820671122s ago: executing program 6 (id=1163): ioperm(0x0, 0x6, 0x2da3b9f3) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40805) 1m32.184428653s ago: executing program 38 (id=1163): ioperm(0x0, 0x6, 0x2da3b9f3) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40805) 55.996538441s ago: executing program 9 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008014}, 0x4004) 55.939987428s ago: executing program 9 (id=1234): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x200088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 54.739711766s ago: executing program 9 (id=1236): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 49.350131572s ago: executing program 9 (id=1245): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,gid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00d<', @ANYRESDEC=0x0, @ANYBLOB=',rootdir=00000000000000000004,uid=ignore,uid=ignore,gid=ignore,iocharset=koi8-u,umask=00000000000000000077777,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x11) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) 48.968046196s ago: executing program 9 (id=1248): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x4880) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x8, 0x100001d, 0x4003, 0x83ffffc, 0xb, "69b7841b47f3ce7a26149600"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010a24010400000201020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4040055) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0xc8601, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) socket$inet6(0xa, 0x3, 0x7) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) 46.532577054s ago: executing program 9 (id=1256): syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d010140000102030109027800030100000009040000000103"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x208000, 0x0) 45.995901276s ago: executing program 39 (id=1256): syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d010140000102030109027800030100000009040000000103"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x208000, 0x0) 7.9082871s ago: executing program 0 (id=1330): getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fedbdf250e0000000c00038008000100fd0000003400098008000200050000000800020001000000080002000300000008000200000040000800010012d5ffff08000200fd6affff3c00038008000100f7ffffff08000200080000000800020002000000080002003a000000080002000900000008000300060000000800010003000000"], 0x90}, 0x1, 0x0, 0x0, 0x20040800}, 0x24040000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000001080)=0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000001100)=0xfffffffc) r4 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000040)="7bd634", 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600)="001a000000000000", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) 6.120658137s ago: executing program 0 (id=1332): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000340)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030332c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c00000000000000000000000000000000354eef01b6fe0eeace56162abf16f0c7743e575daeeddae88b357c70438c7dfc42944f66c4a4ccaf45db8578accd07de5490e9d9d4"], 0x4, 0x4431, &(0x7f0000004480)="$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") 4.869764601s ago: executing program 5 (id=1336): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a009cb2fc74d319550e527c00003c0001802c00018014000300fe8000000000040000000000000000aa14000400ea0100000000000000000000000000010c00028005000100000000003c0002802c0001801400030000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006"], 0xac}}, 0x24004c50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r4, r4) preadv(r3, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20044800) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) 4.832215771s ago: executing program 0 (id=1337): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x200088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 3.988377418s ago: executing program 5 (id=1338): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"], 0xfdef) 3.296775631s ago: executing program 0 (id=1339): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket(0x21, 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_open_dev$video4linux(&(0x7f0000000240), 0x6000000, 0x10401) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xedda, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0xf, 0x0, 0x9, 0x6, 0x0, 0x1}, 0x0, 0x0) listen(r0, 0x1) landlock_create_ruleset(&(0x7f0000000240)={0x4004, 0x2}, 0x18, 0x2) 3.041339791s ago: executing program 5 (id=1340): getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fedbdf250e0000000c00038008000100fd0000003400098008000200050000000800020001000000080002000300000008000200000040000800010012d5ffff08000200fd6affff3c00038008000100f7ffffff08000200080000000800020002000000080002003a000000080002000900000008000300060000000800010003000000"], 0x90}, 0x1, 0x0, 0x0, 0x20040800}, 0x24040000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000001080)=0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000001100)=0xfffffffc) r4 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000040)="7bd634", 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600)="001a000000000000", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) 2.44640249s ago: executing program 8 (id=1257): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x5adae000) madvise(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a00040005000000000000720000", 0x32}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) r7 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @struct={0x7}, 0x0, 0x5, 0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x0, 0xce82}, 0x4000, 0x8, [0x0, 0x7, 0x1000000000]}, {0x1b3, @usage=0x80009, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x58a, @struct={0x2, 0xf135}, 0x3, 0xa, [0x4, 0x1, 0x2, 0xfffffffffffffffc, 0x0, 0x1]}, {0x6, @struct={0x5, 0x8}, 0x0, 0x7, 0x807fc, 0xfffffffffffffffe, 0x0, 0x4, 0x0, @struct={0x0, 0x6}, 0xffffffff, 0x4, [0x80000000, 0x800004, 0x0, 0x3ff, 0x80]}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000000)={"cd29b4bdfa55e97f092db1f344b9b3ae", 0x0, 0x0, {0x101, 0x5}, {0xffffffffffffffff, 0x1}, 0x6, [0x5, 0x7, 0x81, 0x3, 0x7fffffffffffffff, 0x3, 0x8, 0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0x8, 0x5, 0x6, 0x7623497a]}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVioGFVN1SiVkNOURwgUIUFNSJSKOpGrmXvP7J1zdx6Odx1v+vtJ3jkz//O8c2c85947ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8fjt3xhotaxd981SPf/u4Db//44Y8s3P3EVz51RwjTtce7snDXxac+11s5+Z7vHfrpF7+wad2jp/vzcnk8rKn+6c7vfCLW+ou1IXyjK4TeNLB+OAv05feHY32vGg5hXVgM1EvMDGUl0obDDwZDOBIWA/WqvjUYwnAhsO3R7z/0mWrinsEQLg0hVNI2flzJ2hhMA5f1Z4GhNHBrbxb4nzOZeuCb3VkAzll8MdR3+oXpxgxjS5drsv/1LVvHXlzp8HpiYqx5vt9uXeFOFfSnD0yf09NWqo4VUXp5HPdqWwWvttJ2vsvTVvwglX9CObMYqoTuXTM37Dgwtz8+0h0mJnqa1bRCz/NjT31059mkV81+GDswtiz74b2f//nHvvTktfff98l3XP/gM78fP9dunixs0mJ6pVVCvs+tmucx2uL9ZBW8/EqfksbbPm21Ii/xD12f/tnf/kmreGn+P9Z6/h9353jb3ZA71np6JJubx0eGY+LUSDY3BwAAgFVjNRw1nf/K1VOt6ivN/8c7O/8fT/nnk/lstMdD2FJL3D4awiW1x7PAsdjcB0dDeG0tNd0Y2JoEjofwilriinpVSYmBWGI8CfxqJA9sSQInYmA6CXw5Bu5KAp+IgYUksDMGjieBt8ZAmG0cxx+P5OPoODAYA9uzjbgQr0J4eiS2lmyrx+tVAQAALJN8dtjXeLdwrcO5ZojTy4XBdhniFdhNM1SSGtIZbH1a1bSG3nY1dLeroT7u+dbDL9Xc1a7m0mUYXY0Z9n70d38WWijN/ydbz/8rS3Skq3T+P4Tran9j7u48MlePb59uyAAAAACcgzVbb9nWKl6a/2/p7Pr/eEykp5A5PBwPQ+weDWGyMZBVe3U5kJ31XpMHAAAAYDWon4+vnwufzW+zS7TT+XQ5//RZ5o8n/rcsmf/X73zTTa36W5r/T3d2/f9Q423WiROxF58dDWGgEPhh7GU1UDMeAz97S2MgH/+JuAHujFXlFybUq7ozltgeA5NJ4EizEo/US1zSGMifrHrjt9fHMZuXKAQAAADgvIuHA+J5+Xj9/2MHTr6tVbnS/H/72V3/X5sHly7vn1sTwobeEHrSLwY8PJQtDBgDw1154rtDWV09aVWHhkK4pjqwtKon8vX/e9M1Bh8dzKqKgUte99WnLqsm/m4whA3FwI/ef3RTNbE/CdQbf99gCK+pjjZt/OsDWeN9aeP3DoTw6kKgXtUHB0KoNtafVvX9Sv47BmlVD1ZCuKgQqFe1uRLCwQDAKhX/K91VfHDfwdt275ibm9m7gol4DH8w3DA7NzOx89a5XZUmfdqV9LlhGaND5TE1XQ4p8Xi+RNGx564a6SRd/57gZLEv+XH80oWD+f34WaivNs6pvoa7V6ZDfsPry02EwiepF2vIQ8VKFp/EUv0xf39YEwYO7JvZO/HhHfv3792Y/e00+1T2Nw4q21Yb0201tFTfLoDd4/JiJRv237xnw76Dt62fvXnHjTM3ztwyNfnGTZs3TU1u3ryhOqrJ7G+boV6+VNXJUM8cPf9DfWVvoZLz8a4hISGx2hLztx9d0+rtpzT/39N6/h/fdeI7f74+Q7Pz/2PxNH/2+OJp/u0xcKTT8/9jzc7m1y8MGE8C8zEw7zQ/AAAALw3xcGQ87BiPWvcfvfI3rcqV5v/znX3/f5nW/68vXf+uZsv8XxFLTDZb/z9d5r++/v98s/X/02X+6+v/H3kR1v8/UA8km+Rp6/8DAAAvBedv/f+2y/unPxBQytB2ef/0BwJKGdou49/pDwSc9fr/Uzf99BehhdL8/67O5v8W7gcAAIALx93/9NRrWsVL8/8jnc3/z//6f6HZ9f/jzQLTzRYGtP4fAAAAq1Sz9f/OjP7F+1qVK83/Fzqb/8fLLrobcsdaT49ka9qFdE27UyP1rwwAAADA6tAdJib6OszbsDLq1hfe5mP5UqCt0kU/vPq/bmxVX2n+f7yz+X/D9zLu/fzPP/alJ6+9//R9n3zH9Q8+8/vxxfP/AAAAwMrp9LgEAAAAAAAAAAAAAADw4jvwgX891Spe+v5/uK72eLPv/8ff/YvfL3h5Q+5Ya/v1//L72979wMHakoUPj4Tw+mJg9+Hd60L+2/yXFwMPXX/FxdXE4bTEd37y1l9WEx9IA+9c/7Jnq4lrksD2uEjiK9JA/FXFZ9cmgbi84r+ngbg9FtJAfx749NpsHF3ptvr1cLatutJt9R/DIYwWAvVt9Y3hrI2udID3JIH6AD+UBuIA35MHutNePbAm61UMDMeif7Mm6xUAABes+CmwL9wwOzczGT/Cx9tX9jbeRg1Llh0qV9vTYfOP50uTHXvuqpFO0j3pZ9HF3xrvC5XqEDaWPq4Ws3TVRrk8tbTZdC9vMuR2q72t1Kbrbz6iwWxEEztvndvV13bgV7bPMtXbNsvG0mSnmKW7tkk7qKWDvnQwog63TQddjve7w8RET5LrTTE4Fhq02yM6/b5+cZ2/ZntBMc+hub7nW9VXmv+PdTb/rxTH9Wz+YwDz8Zf1/nLUMv8AAACwsj699Q/3xX/fGX3vf7bKW5r/j3c2/48HxvJTwdnRjuPx9/9vHw2h9tP6Y1ngWGzug6MhvLaWmo4lsh/Uf1csMZkFjsUDJlfEEtunG6saiIGFJPCrkTxwPAmciIH8KMVXQ34o5+6REDbVUtc1ltgTS4wlgffGwHgSmIiBySSwNga2JIHfrM0D00ngX2IgzDZuq39Ym28rAACAs5HPs/oa74Z0nrfQ2y5DV7sMQ+0ydLfLUGmXodko4v2vxQx9xfPxeYb4UF9a62BSSylD/DH8s+5XKUN4pDFnWrDUdP1KkrHGnDHDtoXDa0MLpfn/ZGfz/6HG26z1E3H+v/j7f1ngh7F7n42Xjo/HwM/e0hjIDwyciJPdO+tVTecl8kn7nbHElhgYTwJ7YmBLEth+XR44cnFjIJ9p1xu/vd74bF6iEAAAAIDzLh4giIdp4vz/vwee/+tW5Urz/y2dzf9je2uKjX0i1vqLtSF8o2uxN/XA+uEsEI9jDMevx79qOIR1hQMc9RIzQ1mJ/qTh8IPB7Bvq/WlV3xrMvnwQ72979PsPfaaauGcwhEsLR1/qbfy4krUxmAYu688CQ2ng1t4sEI/81APf7M4CcM7qRwXjDpVf6lI3tnS5JvvfS+U3QdPhlY6BLpFvqe9crZRK+kB+TLXu7J62UnWsjHT7H/dqWw2vtufz/4Pr/fJqK36QOpNsnuoQu3fN3LDjwNz++Ejxm6wlK/Q8F7+l2kl6GfbD+Rfe26i7aaSSdmAyefuYXLrc0vthV6zu3s///GNfevLa++/75Duuf/CZ34+362C7/Td+UfiWm/535GRh8660Ssj3uQv+/SR9YNr7yWr4byB9YNzTFkK4Y+GSp1vFS/P/6c7m/73Jbc0f4sbcNxrCGwob9+G4+d82mr0PFgLZu+RF5UB2yv3JkabvnAAAALDc6oc76scLZvPb7ILwdJ5czj99lvnj8YotS+bvtN8fufTSf2wVL83/t7ee/w8k3XT+3/l/Vojz/0u60A9FD6QPzJ/ToehSdayI0svD+f+wCl5tpTM1zv8H5/+X7N8ynP9vzvn/lpz/X90u9Ket9Clpjw9dIYTBr1/9SKt4af6/p7P5v/X/ll60r77+3/Zm6//tabb+37z1/wAAgBXVZKG5dJ5XWr2vlCFdva+Uoe0CgW2XGLT+31mv/zf0V+//XWihNP+f72z+H3eHNcXWV8v6f+PXNanqrhjYY2FAAAAALkTNDhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4vrVyaG3t4q/+apHvv3dB97+8cMfWbj7ia986o4QZmuPd2XhrotPfa63cvI93zv00y9+YdO6R09X8nJ9+e0fNeSOtZ4eCeFI4ZHhmDg1Ur2zGNj27gcO9lYTD4+E8PpiYPfh3euqiS+PhHB5MfDQ9VdcXE0cTkt85ydv/WU18YE08M71L3u2mrgmD3Sl3b1/bdbdrrS7n1kbwmghUO/uTWsbq6q3cW0e6E7b+PvhrI0YGI5F7xvO2oiBuVhidiCEDb0h9KRV/XMlq6onrerblayqnrSqj1dCuCaE0JtW9ZP+rKredOT/1p9VFQOXvO6rT11WTRzpD2FDMfCj9x/dVE18KAnUG//T/hBeU91l0sa/1pc13pc2fk9fCK8OIfSnJZ7pzUr0pyWe6A3hokKg3vif94ZwMPCSEN98dhUf3Hfwtt075uZm9q5goj9vazDcMDs3M7Hz1rldlaRPzXQV0mcOlePdHY798ac+urN6e+y5q0Y6Sffm5fpqXZ7qa7h75XL1vmuFeh/7NVSsZPH5KNUf8/eHNWHgwL6ZvRMf3rF//96N2d9Os09lf3vyaLatNi7XturUC91Wlxcr2bD/5j0b9h28bf3szTtunLlx5papyTdu2rxpanLz5g3VUU1mf5djqEfL8Z4VHuorewuVnI83AAkJidWW6G54d5u80P/LLn3QX+xoX6jU3qBL04pilq7aKJdj0Ftbx89y0NUeNf+c0nZEG0sTh1KWqfZZrixNJhazDGZZap/rSpPDYk3dtU0a73eHiYmm/9ONNd4tbr7fLrF5O/VYvuk6TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA///jqU04") write$binfmt_aout(r1, 0x0, 0xffffffdb) 2.267800684s ago: executing program 5 (id=1341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0f604065df54578770a44ca7932716c79e836c2e2ef91ea777020beee349610e0c2eff96f6f38c436bf890d1dee2740ce95e0617978de0eb4f858e229a217b13", 0x2d}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r3) keyctl$read(0xb, r3, &(0x7f00000001c0)=""/171, 0xab) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.165425547s ago: executing program 0 (id=1342): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 1.864607511s ago: executing program 0 (id=1343): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f0002000000090505020006", @ANYRESHEX], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0xce7ed956892faa36, 0xe, 0xd, {0xd, 0x22, "d9b21577d8dfcf3d9c5710"}}, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x2, "1b69"}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)="ec", 0x1}], 0x2) 197.012305ms ago: executing program 5 (id=1344): r0 = syz_open_dev$usbmon(&(0x7f00000021c0), 0x8000000000000000, 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 0s ago: executing program 5 (id=1345): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0xf88, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/222, 0xde, 0x1, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x37}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 0x0 phys_seg 1 prio class 0 [ 472.611040][ T6007] Buffer I/O error on dev nbd6, logical block 3, async page read [ 472.624463][ T6007] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 472.636542][ T6007] Buffer I/O error on dev nbd6, logical block 0, async page read [ 472.649524][ T6007] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 472.658933][ T6007] Buffer I/O error on dev nbd6, logical block 1, async page read [ 472.690398][ T6007] Dev nbd6: unable to read RDB block 0 [ 472.857347][ T6007] nbd6: unable to read partition table [ 473.005273][ T6007] ldm_validate_partition_table(): Disk read failed. [ 473.016069][ T6007] Dev nbd6: unable to read RDB block 0 [ 473.022945][ T9632] nbd: nbd6 already in use [ 473.053334][ T6007] nbd6: unable to read partition table [ 473.895533][ T9651] xt_TCPMSS: Only works on TCP SYN packets [ 475.202483][ T9655] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 475.209033][ T9655] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 475.313564][ T9655] vhci_hcd vhci_hcd.0: Device attached [ 475.390808][ T9659] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 475.397456][ T9659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.500325][ T5932] vhci_hcd: vhci_device speed not set [ 475.558302][ T9659] vhci_hcd vhci_hcd.0: Device attached [ 476.404194][ T5932] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 476.864247][ T9655] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 476.870894][ T9655] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 477.134277][ T9667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 477.140907][ T9667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 477.148914][ T9655] vhci_hcd vhci_hcd.0: Device attached [ 477.299573][ T9655] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.383246][ T9667] vhci_hcd vhci_hcd.0: Device attached [ 477.385984][ T9659] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(21) [ 477.395344][ T9659] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 477.415472][ T9667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.477391][ T9659] vhci_hcd vhci_hcd.0: Device attached [ 477.743500][ T9655] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(26) [ 477.750153][ T9655] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 478.180461][ T9655] vhci_hcd vhci_hcd.0: Device attached [ 478.767255][ T9683] vhci_hcd: connection closed [ 478.875976][ T49] vhci_hcd: stop threads [ 478.910263][ T9676] vhci_hcd: connection closed [ 478.921762][ T9669] vhci_hcd: connection closed [ 478.927231][ T9666] vhci_hcd: connection closed [ 478.931955][ T9660] vhci_hcd: connection closed [ 478.954227][ T9656] vhci_hcd: connection reset by peer [ 478.974459][ T49] vhci_hcd: release socket [ 479.044192][ T49] vhci_hcd: disconnect device [ 479.347949][ T49] vhci_hcd: stop threads [ 479.352248][ T49] vhci_hcd: release socket [ 479.361755][ T49] vhci_hcd: disconnect device [ 479.377803][ T49] vhci_hcd: stop threads [ 479.382495][ T49] vhci_hcd: release socket [ 479.391155][ T49] vhci_hcd: disconnect device [ 479.398115][ T49] vhci_hcd: stop threads [ 479.402463][ T49] vhci_hcd: release socket [ 479.427358][ T49] vhci_hcd: disconnect device [ 479.435608][ T49] vhci_hcd: stop threads [ 479.439869][ T49] vhci_hcd: release socket [ 479.475523][ T49] vhci_hcd: disconnect device [ 479.485384][ T49] vhci_hcd: stop threads [ 479.503168][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.503486][ T49] vhci_hcd: release socket [ 479.520203][ T49] vhci_hcd: disconnect device [ 479.525737][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.534029][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.549207][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.557418][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.846989][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.857'. [ 482.224191][ T5143] Bluetooth: hci3: command tx timeout [ 482.344592][ T5932] vhci_hcd: vhci_device speed not set [ 483.531986][ T6536] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.755820][ T5925] usb usb34-port1: attempt power cycle [ 484.274189][ T5834] Bluetooth: hci3: command tx timeout [ 484.590834][ T9746] netlink: 'syz.3.866': attribute type 2 has an invalid length. [ 484.677054][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 484.677098][ T30] audit: type=1326 audit(1750642392.228:178): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9741 comm="syz.6.864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa1858e929 code=0x0 [ 484.867382][ T9759] syz.6.864: attempt to access beyond end of device [ 484.867382][ T9759] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 485.226440][ T5925] usb usb34-port1: unable to enumerate USB device [ 485.237741][ T1606] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 485.737189][ T6536] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.799553][ T1606] usb 1-1: Using ep0 maxpacket: 32 [ 485.905942][ T1606] usb 1-1: unable to get BOS descriptor or descriptor too short [ 485.926259][ T1606] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 485.960526][ T1606] usb 1-1: config 12 has no interface number 0 [ 485.998316][ T1606] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 486.023846][ T1606] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 486.045022][ T1606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.101275][ T1606] usb 1-1: Product: syz [ 486.141113][ T1606] usb 1-1: Manufacturer: syz [ 486.176930][ T1606] usb 1-1: SerialNumber: syz [ 486.345050][ T6536] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.365062][ T5834] Bluetooth: hci3: command tx timeout [ 486.472246][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.872'. [ 487.332024][ T9756] befs: (nullb0): No write support. Marking filesystem read-only [ 487.342092][ T9756] befs: (nullb0): invalid magic header [ 488.449760][ T5834] Bluetooth: hci3: command tx timeout [ 488.458849][ T1606] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.643321][ T1606] usb 1-1: USB disconnect, device number 13 [ 488.779645][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.963869][ T6536] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.049117][ T9703] chnl_net:caif_netlink_parms(): no params data found [ 490.694235][ T1606] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 491.078911][ T1606] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 491.524709][ T1606] usb 4-1: config 0 has no interface number 0 [ 492.284856][ T1606] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 492.324021][ T1606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.584606][ T1606] usb 4-1: Product: syz [ 492.804184][ T1606] usb 4-1: Manufacturer: syz [ 492.820601][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.854354][ T1606] usb 4-1: SerialNumber: syz [ 492.870061][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.923137][ T1606] usb 4-1: config 0 descriptor?? [ 492.971566][ T9703] bridge_slave_0: entered allmulticast mode [ 493.194371][ T9703] bridge_slave_0: entered promiscuous mode [ 493.313346][ T9703] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.355071][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.394518][ T9703] bridge_slave_1: entered allmulticast mode [ 493.397301][ T1606] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 493.402852][ T9703] bridge_slave_1: entered promiscuous mode [ 493.453985][ T1606] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 493.485167][ T1606] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 493.547405][ T1606] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 493.622224][ T1606] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 493.699440][ T1606] usb 4-1: USB disconnect, device number 5 [ 493.761881][ T1606] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 493.810765][ T1606] keyspan 4-1:0.133: device disconnected [ 493.830352][ T9703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.016591][ T9703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.102196][ T6536] bridge_slave_1: left allmulticast mode [ 494.121234][ T6536] bridge_slave_1: left promiscuous mode [ 494.154649][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.322896][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.886'. [ 495.047887][ T6536] bridge_slave_0: left allmulticast mode [ 495.114654][ T6536] bridge_slave_0: left promiscuous mode [ 495.120388][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.216893][ T9833] netlink: 'syz.7.885': attribute type 2 has an invalid length. [ 500.759496][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.765920][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.802357][ T5971] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 500.978904][ T6536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.997063][ T6536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.049058][ T6536] bond0 (unregistering): Released all slaves [ 501.204174][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 501.222442][ T5971] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 501.248343][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.336564][ T5971] usb 1-1: Product: syz [ 501.343186][ T5971] usb 1-1: Manufacturer: syz [ 501.349436][ T5971] usb 1-1: SerialNumber: syz [ 501.375396][ T9703] team0: Port device team_slave_0 added [ 501.395315][ T5971] usb 1-1: config 0 descriptor?? [ 501.438046][ T5971] gspca_main: se401-2.14.0 probing 047d:5003 [ 501.666889][ T9703] team0: Port device team_slave_1 added [ 501.860867][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.898'. [ 502.311766][ T5971] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 502.804395][ T5971] usb 1-1: USB disconnect, device number 14 [ 505.516555][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.531379][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.718201][ T9703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.771573][ T9904] syz_tun: entered allmulticast mode [ 505.921202][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.991312][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.051215][ T9703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.212845][ T9920] netlink: 'syz.5.905': attribute type 1 has an invalid length. [ 506.285810][ T9920] nbd: error processing sock list [ 506.312260][ T6536] hsr_slave_0: left promiscuous mode [ 506.338084][ T6536] hsr_slave_1: left promiscuous mode [ 506.342123][ T9920] block nbd0: shutting down sockets [ 506.361602][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.380595][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.395126][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.422654][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.584437][ T6536] veth1_macvtap: left promiscuous mode [ 506.753787][ T6536] veth0_macvtap: left promiscuous mode [ 506.774779][ T6536] veth1_vlan: left promiscuous mode [ 506.780225][ T6536] veth0_vlan: left promiscuous mode [ 507.644384][ T9938] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 507.651024][ T9938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 507.724403][ T9938] vhci_hcd vhci_hcd.0: Device attached [ 507.775369][ T9943] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 507.781975][ T9943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.815791][ T9943] vhci_hcd vhci_hcd.0: Device attached [ 507.899824][ T9943] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(16) [ 507.906468][ T9943] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 507.914663][ T5918] vhci_hcd: vhci_device speed not set [ 507.982461][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.909'. [ 508.024350][ T5918] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 508.084323][ T9943] vhci_hcd vhci_hcd.0: Device attached [ 508.152180][ T9938] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 508.158828][ T9938] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 508.306179][ T9938] vhci_hcd vhci_hcd.0: Device attached [ 508.307060][ T9956] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 508.311750][ T9943] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(22) [ 508.322195][ T9956] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 508.326346][ T9943] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 508.602057][ T9943] vhci_hcd vhci_hcd.0: Device attached [ 508.654049][ T9938] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 508.660674][ T9938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 508.705082][ T9938] vhci_hcd vhci_hcd.0: Device attached [ 508.712601][ T9960] vhci_hcd: connection closed [ 508.714418][ T1134] vhci_hcd: stop threads [ 508.723343][ T1134] vhci_hcd: release socket [ 508.729110][ T9947] vhci_hcd: connection closed [ 508.743692][ T9955] vhci_hcd: connection closed [ 508.749093][ T9944] vhci_hcd: connection closed [ 508.753996][ T9940] vhci_hcd: connection reset by peer [ 508.754268][ T9949] vhci_hcd: connection closed [ 508.805114][ T1134] vhci_hcd: disconnect device [ 508.833745][ T1134] vhci_hcd: stop threads [ 508.854219][ T1134] vhci_hcd: release socket [ 508.859033][ T1134] vhci_hcd: disconnect device [ 508.865319][ T1134] vhci_hcd: stop threads [ 508.869746][ T1134] vhci_hcd: release socket [ 508.884468][ T1134] vhci_hcd: disconnect device [ 508.898124][ T1134] vhci_hcd: stop threads [ 508.907341][ T1134] vhci_hcd: release socket [ 508.915064][ T1134] vhci_hcd: disconnect device [ 508.930722][ T1134] vhci_hcd: stop threads [ 508.935237][ T1134] vhci_hcd: release socket [ 508.939801][ T1134] vhci_hcd: disconnect device [ 508.951655][ T1134] vhci_hcd: stop threads [ 508.956737][ T1134] vhci_hcd: release socket [ 508.961311][ T1134] vhci_hcd: disconnect device [ 509.356347][ T6536] team0 (unregistering): Port device team_slave_1 removed [ 509.435660][ T9970] netlink: 152 bytes leftover after parsing attributes in process `syz.0.913'. [ 510.012762][ T6536] team0 (unregistering): Port device team_slave_0 removed [ 512.095331][ T9991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 512.841577][ T9703] hsr_slave_0: entered promiscuous mode [ 512.894694][ T9703] hsr_slave_1: entered promiscuous mode [ 512.965048][ T9703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.998693][ T9703] Cannot create hsr debugfs directory [ 513.224333][ T5918] vhci_hcd: vhci_device speed not set [ 514.634246][ T90] usb usb44-port1: attempt power cycle [ 515.683347][T10009] sp0: Synchronizing with TNC [ 516.576121][ T90] usb usb44-port1: unable to enumerate USB device [ 516.818425][T10026] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 516.825064][T10026] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 516.903974][T10026] vhci_hcd vhci_hcd.0: Device attached [ 516.950718][T10030] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(14) [ 516.957340][T10030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.014927][T10030] vhci_hcd vhci_hcd.0: Device attached [ 517.047425][T10026] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(13) [ 517.054041][T10026] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 517.094459][T10026] vhci_hcd vhci_hcd.0: Device attached [ 517.104522][ T5932] vhci_hcd: vhci_device speed not set [ 517.173320][T10026] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(16) [ 517.179949][T10026] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 517.195206][ T5932] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 517.205147][T10026] vhci_hcd vhci_hcd.0: Device attached [ 517.218198][ T9703] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 517.278465][T10026] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(21) [ 517.285094][T10026] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 517.315805][T10030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 517.348928][ T9703] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 517.372358][T10030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 517.429411][T10026] vhci_hcd vhci_hcd.0: Device attached [ 517.446273][ T9703] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 517.474965][T10045] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(28) [ 517.481595][T10045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 517.507526][ T9703] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 517.626550][T10045] vhci_hcd vhci_hcd.0: Device attached [ 517.717689][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.928'. [ 517.728582][T10049] vhci_hcd: connection closed [ 517.758658][T10036] vhci_hcd: connection closed [ 517.767687][T10033] vhci_hcd: connection closed [ 517.775606][T10031] vhci_hcd: connection closed [ 517.780490][T10039] vhci_hcd: connection closed [ 517.906794][T10027] vhci_hcd: connection reset by peer [ 518.303211][ T49] vhci_hcd: stop threads [ 518.361487][ T49] vhci_hcd: release socket [ 518.443081][ T49] vhci_hcd: disconnect device [ 518.486247][ T49] vhci_hcd: stop threads [ 518.526427][ T49] vhci_hcd: release socket [ 518.581739][ T49] vhci_hcd: disconnect device [ 518.620307][ T49] vhci_hcd: stop threads [ 518.654736][ T49] vhci_hcd: release socket [ 518.684278][ T49] vhci_hcd: disconnect device [ 518.709036][ T49] vhci_hcd: stop threads [ 518.747329][ T49] vhci_hcd: release socket [ 518.768110][ T49] vhci_hcd: disconnect device [ 518.818112][ T49] vhci_hcd: stop threads [ 518.822367][ T49] vhci_hcd: release socket [ 518.877017][ T49] vhci_hcd: disconnect device [ 518.924184][ T49] vhci_hcd: stop threads [ 518.929170][ T49] vhci_hcd: release socket [ 518.969414][ T49] vhci_hcd: disconnect device [ 519.692565][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.851216][ T9703] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.947967][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.955185][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.100316][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.107481][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.506090][ T5932] vhci_hcd: vhci_device speed not set [ 523.314264][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 524.040993][ T5964] usb usb48-port1: attempt power cycle [ 524.290861][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.382892][T10135] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 524.389531][T10135] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 524.409303][T10135] vhci_hcd vhci_hcd.0: Device attached [ 524.470697][T10144] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 524.477316][T10144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 524.519354][T10144] vhci_hcd vhci_hcd.0: Device attached [ 524.597924][T10135] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(16) [ 524.604551][T10135] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 524.631246][T10148] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(19) [ 524.637864][T10148] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 524.704509][T10135] vhci_hcd vhci_hcd.0: Device attached [ 524.714193][ T5964] usb 48-1: SetAddress Request (5) to port 0 [ 524.734559][ T5964] usb 48-1: new SuperSpeed USB device number 5 using vhci_hcd [ 524.758857][T10144] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(23) [ 524.765458][T10144] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 524.854314][T10144] vhci_hcd vhci_hcd.0: Device attached [ 524.889297][T10148] vhci_hcd vhci_hcd.0: Device attached [ 525.019318][T10163] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.094712][T10135] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.133283][T10144] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(29) [ 525.139877][T10144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 525.202498][T10144] vhci_hcd vhci_hcd.0: Device attached [ 525.221994][T10167] vhci_hcd: connection closed [ 525.222254][ T13] vhci_hcd: stop threads [ 525.253768][T10149] vhci_hcd: connection closed [ 525.262348][T10151] vhci_hcd: connection reset by peer [ 525.263991][T10154] vhci_hcd: connection closed [ 525.270520][T10139] vhci_hcd: connection closed [ 525.291620][T10145] vhci_hcd: connection closed [ 525.299193][ T13] vhci_hcd: release socket [ 525.352181][ T13] vhci_hcd: disconnect device [ 525.404169][ T13] vhci_hcd: stop threads [ 525.419267][ T13] vhci_hcd: release socket [ 525.454432][ T13] vhci_hcd: disconnect device [ 525.484036][ T13] vhci_hcd: stop threads [ 525.522156][ T13] vhci_hcd: release socket [ 525.588979][ T13] vhci_hcd: disconnect device [ 525.603749][ T13] vhci_hcd: stop threads [ 525.646993][ T13] vhci_hcd: release socket [ 525.701175][ T13] vhci_hcd: disconnect device [ 525.740594][ T13] vhci_hcd: stop threads [ 525.763259][ T13] vhci_hcd: release socket [ 525.849205][ T13] vhci_hcd: disconnect device [ 525.874212][ T8741] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 525.921036][ T13] vhci_hcd: stop threads [ 525.943890][ T13] vhci_hcd: release socket [ 526.064247][ T13] vhci_hcd: disconnect device [ 526.094017][ T8741] usb 1-1: Using ep0 maxpacket: 8 [ 526.113001][ T9703] veth0_vlan: entered promiscuous mode [ 526.143732][ T8741] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 526.162350][ T8741] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 526.162896][ T9703] veth1_vlan: entered promiscuous mode [ 526.294783][ T9703] veth0_macvtap: entered promiscuous mode [ 526.377966][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.7.952'. [ 526.532589][ T9703] veth1_macvtap: entered promiscuous mode [ 527.034735][ T8741] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 527.109961][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.144226][ T8741] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 527.194042][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.243544][ T9703] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.264734][ T9703] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.446401][ T9703] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.455325][ T9703] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.472767][ T6536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.511086][ T8741] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 528.525162][ T6536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.646709][ T8741] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.706470][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.770209][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.171422][ T8741] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.205318][ T8741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.274402][T10207] overlayfs: missing 'lowerdir' [ 529.325301][ T8741] usb 1-1: can't set config #16, error -71 [ 529.434780][ T8741] usb 1-1: USB disconnect, device number 15 [ 529.897502][ T5964] usb 48-1: device descriptor read/8, error -110 [ 529.980917][T10215] syz.9.848: attempt to access beyond end of device [ 529.980917][T10215] nbd9: rw=0, sector=2, nr_sectors = 2 limit=0 [ 529.993654][T10215] vxfs: unable to read disk superblock at 1 [ 529.999783][T10215] syz.9.848: attempt to access beyond end of device [ 529.999783][T10215] nbd9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 530.012565][T10215] vxfs: unable to read disk superblock at 8 [ 530.018624][T10215] vxfs: can't find superblock. [ 530.043059][ T5964] usb usb48-port1: unable to enumerate USB device [ 530.114282][ T90] vhci_hcd: vhci_device speed not set [ 530.241228][T10220] sp0: Synchronizing with TNC [ 531.367491][T10232] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 531.374130][T10232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 531.404208][T10232] vhci_hcd vhci_hcd.0: Device attached [ 531.506102][T10232] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 531.512732][T10232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.575698][T10232] vhci_hcd vhci_hcd.0: Device attached [ 531.604481][ T9] vhci_hcd: vhci_device speed not set [ 531.671204][T10232] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 531.677834][T10232] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 531.702576][ T9] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 531.786384][T10232] vhci_hcd vhci_hcd.0: Device attached [ 531.880013][T10246] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 531.886640][T10246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.921916][T10249] netlink: 'syz.6.964': attribute type 10 has an invalid length. [ 531.950404][T10249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.978508][T10249] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 532.101158][T10246] vhci_hcd vhci_hcd.0: Device attached [ 532.451329][T10246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.557365][T10232] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(22) [ 532.564003][T10232] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 532.704538][T10246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.713738][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 532.950340][T10232] vhci_hcd vhci_hcd.0: Device attached [ 533.330503][T10260] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(29) [ 533.337140][T10260] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 533.559703][T10260] vhci_hcd vhci_hcd.0: Device attached [ 533.597651][T10262] vhci_hcd: connection closed [ 533.599308][T10251] vhci_hcd: connection closed [ 533.600874][ T1134] vhci_hcd: stop threads [ 533.621498][T10235] vhci_hcd: connection reset by peer [ 533.625960][T10243] vhci_hcd: connection closed [ 533.627002][T10241] vhci_hcd: connection closed [ 533.627206][T10247] vhci_hcd: connection closed [ 533.704228][ T1134] vhci_hcd: release socket [ 533.772378][ T1134] vhci_hcd: disconnect device [ 533.800916][ T1134] vhci_hcd: stop threads [ 533.834541][ T1134] vhci_hcd: release socket [ 533.849681][ T1134] vhci_hcd: disconnect device [ 533.872605][ T1134] vhci_hcd: stop threads [ 533.889253][ T1134] vhci_hcd: release socket [ 533.912346][ T1134] vhci_hcd: disconnect device [ 533.935034][ T1134] vhci_hcd: stop threads [ 533.991307][ T1134] vhci_hcd: release socket [ 534.019739][ T1134] vhci_hcd: disconnect device [ 534.059759][ T1134] vhci_hcd: stop threads [ 534.107720][ T1134] vhci_hcd: release socket [ 534.140898][ T1134] vhci_hcd: disconnect device [ 534.240544][ T1134] vhci_hcd: stop threads [ 534.248158][T10281] overlayfs: missing 'lowerdir' [ 534.253111][ T1134] vhci_hcd: release socket [ 534.254479][ T1134] vhci_hcd: disconnect device [ 535.739942][T10291] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.831278][ T9] vhci_hcd: vhci_device speed not set [ 537.595212][T10309] sp0: Synchronizing with TNC [ 538.852963][ T5918] usb usb34-port1: attempt power cycle [ 539.944376][ T5918] usb usb34-port1: unable to enumerate USB device [ 540.074789][T10320] netlink: 'syz.3.979': attribute type 10 has an invalid length. [ 540.105988][T10320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.130916][T10320] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 541.561430][T10328] sctp: failed to load transform for md5: -2 [ 542.805851][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053746000: rx timeout, send abort [ 543.137466][T10348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 543.144108][T10348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 543.167980][T10345] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 543.174601][T10345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.188763][T10357] overlayfs: missing 'lowerdir' [ 543.217757][T10348] vhci_hcd vhci_hcd.0: Device attached [ 543.274283][T10345] vhci_hcd vhci_hcd.0: Device attached [ 543.314256][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053746000: abort rx timeout. Force session deactivation [ 543.326948][T10345] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(20) [ 543.333548][T10345] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 543.414924][ T9] vhci_hcd: vhci_device speed not set [ 543.434787][T10348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 543.441413][T10348] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 543.518292][ T9] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 543.540781][T10345] vhci_hcd vhci_hcd.0: Device attached [ 543.570407][T10360] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(23) [ 543.577051][T10360] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 543.645516][T10378] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 543.664076][T10348] vhci_hcd vhci_hcd.0: Device attached [ 543.670903][T10360] vhci_hcd vhci_hcd.0: Device attached [ 543.704805][T10371] netlink: 'syz.5.990': attribute type 1 has an invalid length. [ 543.712456][T10371] nbd: error processing sock list [ 543.793567][T10371] block nbd0: shutting down sockets [ 543.803118][T10345] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 544.264274][T10345] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(25) [ 544.270926][T10345] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 544.704536][T10345] vhci_hcd vhci_hcd.0: Device attached [ 544.777243][T10365] vhci_hcd: connection closed [ 544.778186][T10361] vhci_hcd: connection closed [ 544.783113][T10363] vhci_hcd: connection closed [ 544.784401][T10355] vhci_hcd: connection closed [ 544.787949][ T1134] vhci_hcd: stop threads [ 544.811694][T10385] vhci_hcd: connection closed [ 544.815357][T10354] vhci_hcd: connection reset by peer [ 544.829804][ T1134] vhci_hcd: release socket [ 544.870339][ T1134] vhci_hcd: disconnect device [ 544.892832][ T1134] vhci_hcd: stop threads [ 544.909594][ T1134] vhci_hcd: release socket [ 544.932674][ T1134] vhci_hcd: disconnect device [ 544.973480][ T1134] vhci_hcd: stop threads [ 545.019222][ T1134] vhci_hcd: release socket [ 545.057648][T10394] sp0: Synchronizing with TNC [ 545.120433][ T1134] vhci_hcd: disconnect device [ 545.217812][ T1134] vhci_hcd: stop threads [ 545.307328][ T1134] vhci_hcd: release socket [ 545.403548][ T1134] vhci_hcd: disconnect device [ 545.704550][ T1134] vhci_hcd: stop threads [ 545.817506][ T1134] vhci_hcd: release socket [ 545.928468][ T1134] vhci_hcd: disconnect device [ 546.104208][ T1134] vhci_hcd: stop threads [ 546.108506][ T1134] vhci_hcd: release socket [ 546.185412][ T1134] vhci_hcd: disconnect device [ 548.454727][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880537ff400: rx timeout, send abort [ 548.664252][ T9] vhci_hcd: vhci_device speed not set [ 548.963004][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880537ff400: abort rx timeout. Force session deactivation [ 549.123440][T10426] sctp: failed to load transform for md5: -2 [ 549.334547][T10435] overlayfs: missing 'lowerdir' [ 550.322130][T10446] netlink: 'syz.6.1004': attribute type 1 has an invalid length. [ 550.344242][T10446] nbd: error processing sock list [ 550.478694][T10446] block nbd0: shutting down sockets [ 550.693802][T10458] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1008'. [ 551.260437][T10461] sp0: Synchronizing with TNC [ 551.322793][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1008'. [ 551.406235][ T8741] usb usb34-port1: attempt power cycle [ 552.082637][ T8741] usb usb34-port1: unable to enumerate USB device [ 553.765325][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3b6000: rx timeout, send abort [ 553.964158][T10490] ufs: You didn't specify the type of your ufs filesystem [ 553.964158][T10490] [ 553.964158][T10490] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 553.964158][T10490] [ 553.964158][T10490] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 553.994912][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.001118][T10490] ufs: ufstype=old is supported read-only [ 554.008347][T10490] syz.7.1014: attempt to access beyond end of device [ 554.008347][T10490] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 554.273561][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3b6000: abort rx timeout. Force session deactivation [ 555.008326][ T30] audit: type=1326 audit(1750642462.558:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 555.069436][ T30] audit: type=1326 audit(1750642462.558:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 555.204211][ T30] audit: type=1326 audit(1750642462.678:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.012929][ T30] audit: type=1326 audit(1750642462.678:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.036384][ T30] audit: type=1326 audit(1750642462.678:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.077269][ T30] audit: type=1326 audit(1750642462.688:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.077333][ T30] audit: type=1326 audit(1750642462.688:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.077387][ T30] audit: type=1326 audit(1750642462.688:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.077439][ T30] audit: type=1326 audit(1750642462.688:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.077491][ T30] audit: type=1326 audit(1750642462.688:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabec58e929 code=0x7ffc0000 [ 556.596284][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1022'. [ 556.861510][T10517] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 556.893604][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.039930][T10517] nbd: error processing sock list [ 557.047040][T10517] block nbd0: shutting down sockets [ 558.396714][ T9] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 558.636134][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.754361][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 558.811149][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 558.838097][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 558.870326][ T9] usb 10-1: SerialNumber: syz [ 559.252416][ T9] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 559.281110][ T9] usb-storage 10-1:1.0: USB Mass Storage device detected [ 559.307303][ T9] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 559.333164][ T9] scsi host1: usb-storage 10-1:1.0 [ 559.865667][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053436c00: rx timeout, send abort [ 560.373930][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053436c00: abort rx timeout. Force session deactivation [ 560.782818][T10548] block device autoloading is deprecated and will be removed. [ 562.216978][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.258263][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.363578][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1037'. [ 563.026692][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 563.026713][ T30] audit: type=1326 audit(1750642470.578:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 563.211616][ T30] audit: type=1326 audit(1750642470.628:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 563.333253][ T30] audit: type=1326 audit(1750642470.638:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 563.586916][ T30] audit: type=1326 audit(1750642470.638:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 563.609618][ T30] audit: type=1326 audit(1750642470.638:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 563.701527][T10583] netlink: 'syz.6.1040': attribute type 1 has an invalid length. [ 564.376438][T10583] nbd: error processing sock list [ 564.456589][T10583] block nbd0: shutting down sockets [ 564.511677][ T30] audit: type=1326 audit(1750642470.638:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 564.535474][ T30] audit: type=1326 audit(1750642470.638:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 564.628484][ T30] audit: type=1326 audit(1750642470.638:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 564.652241][ T30] audit: type=1326 audit(1750642470.638:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 564.816309][ T30] audit: type=1326 audit(1750642470.638:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 569.844592][ T1606] usb 10-1: USB disconnect, device number 2 [ 571.333717][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1053'. [ 571.693818][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 571.693838][ T30] audit: type=1326 audit(1750642479.228:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 571.814337][ T30] audit: type=1326 audit(1750642479.238:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 571.920374][ T8861] syz_tun (unregistering): left allmulticast mode [ 571.958017][ T30] audit: type=1326 audit(1750642479.238:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.063876][ T30] audit: type=1326 audit(1750642479.238:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.143924][ T30] audit: type=1326 audit(1750642479.238:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.219996][ T30] audit: type=1326 audit(1750642479.238:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.413470][ T30] audit: type=1326 audit(1750642479.238:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.456272][ T30] audit: type=1326 audit(1750642479.258:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.481084][ T30] audit: type=1326 audit(1750642479.258:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.481139][ T30] audit: type=1326 audit(1750642479.258:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd878e929 code=0x7ffc0000 [ 572.938017][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.206763][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.416457][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.682251][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.781357][T10681] blk_print_req_error: 106 callbacks suppressed [ 573.781379][T10681] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.177310][T10684] process 'syz.5.1065' launched './file1' with NULL argv: empty string added [ 576.065872][T10681] buffer_io_error: 106 callbacks suppressed [ 576.065891][T10681] Buffer I/O error on dev nbd6, logical block 0, async page read [ 576.900473][T10681] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.016613][T10681] Buffer I/O error on dev nbd6, logical block 1, async page read [ 577.048647][T10681] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.131204][T10681] Buffer I/O error on dev nbd6, logical block 2, async page read [ 577.198229][T10681] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.218583][T10681] Buffer I/O error on dev nbd6, logical block 3, async page read [ 577.304941][ T5925] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 577.332858][T10681] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.562286][T10681] Buffer I/O error on dev nbd6, logical block 0, async page read [ 577.704320][ T5925] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 577.715364][T10681] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.715420][T10681] Buffer I/O error on dev nbd6, logical block 1, async page read [ 577.715563][T10681] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.715592][T10681] Buffer I/O error on dev nbd6, logical block 2, async page read [ 577.715728][T10681] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.821692][T10681] Buffer I/O error on dev nbd6, logical block 3, async page read [ 577.994168][ T5925] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 578.013510][ T5925] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 578.031361][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 578.124838][T10704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'. [ 578.744237][ T5925] usb 10-1: SerialNumber: syz [ 578.925071][ T5925] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 578.935060][ T49] bridge_slave_1: left allmulticast mode [ 578.940719][ T49] bridge_slave_1: left promiscuous mode [ 578.988555][ T5925] usb-storage 10-1:1.0: USB Mass Storage device detected [ 579.002894][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.110886][T10681] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 579.147662][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 579.323268][ T5925] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 579.447721][T10681] Buffer I/O error on dev nbd6, logical block 0, async page read [ 579.582089][ T5925] scsi host1: usb-storage 10-1:1.0 [ 579.604848][T10681] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 579.630174][T10681] Buffer I/O error on dev nbd6, logical block 1, async page read [ 579.642444][ T49] bridge_slave_0: left allmulticast mode [ 579.662172][T10681] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 579.697384][ T49] bridge_slave_0: left promiscuous mode [ 579.699168][T10681] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 579.743109][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.866904][T10681] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 579.997154][T10681] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 580.188332][T10681] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 580.396119][T10681] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 580.466134][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.480876][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.489106][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.497745][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.505482][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.526346][T10681] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 580.655243][T10681] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 580.729456][T10681] ldm_validate_partition_table(): Disk read failed. [ 580.824992][T10681] Dev nbd6: unable to read RDB block 0 [ 580.888293][T10681] nbd6: unable to read partition table [ 580.956662][T10681] ufs: You didn't specify the type of your ufs filesystem [ 580.956662][T10681] [ 580.956662][T10681] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 580.956662][T10681] [ 580.956662][T10681] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 581.014572][T10681] ufs: ufstype=old is supported read-only [ 581.255001][T10726] netlink: 'syz.5.1072': attribute type 10 has an invalid length. [ 581.742000][ T5964] usb 10-1: USB disconnect, device number 3 [ 582.017286][T10732] overlayfs: overlapping lowerdir path [ 582.531401][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 582.531422][ T30] audit: type=1326 audit(1750642490.078:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 582.594338][ T5834] Bluetooth: hci1: command tx timeout [ 582.642834][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.680118][ T30] audit: type=1326 audit(1750642490.078:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 582.723172][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.743967][ T30] audit: type=1326 audit(1750642490.078:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 582.770892][ T49] bond0 (unregistering): Released all slaves [ 582.793410][ T30] audit: type=1326 audit(1750642490.078:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 582.867521][T10726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.877538][T10726] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 583.074333][ T30] audit: type=1326 audit(1750642490.078:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 583.623017][ T30] audit: type=1326 audit(1750642490.078:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 583.674423][ T30] audit: type=1326 audit(1750642490.078:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 583.697198][ T30] audit: type=1326 audit(1750642490.078:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 583.771671][ T30] audit: type=1326 audit(1750642490.078:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 583.827785][ T30] audit: type=1326 audit(1750642490.078:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6798e929 code=0x7ffc0000 [ 584.674234][ T5834] Bluetooth: hci1: command tx timeout [ 586.755256][ T5834] Bluetooth: hci1: command tx timeout [ 587.264609][ T1606] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 587.313190][T10779] overlayfs: overlapping lowerdir path [ 587.489138][ T1606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 587.592932][ T1606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.672563][ T1606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 587.723606][ T1606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 587.844879][ T1606] usb 4-1: SerialNumber: syz [ 587.861736][ T49] hsr_slave_0: left promiscuous mode [ 588.071366][ T1606] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 588.097612][ T49] hsr_slave_1: left promiscuous mode [ 588.103933][ T1606] usb-storage 4-1:1.0: USB Mass Storage device detected [ 588.111159][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.148249][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.202890][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 588.202932][ T30] audit: type=1326 audit(1750642495.728:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 588.389054][T10789] netlink: 'syz.0.1088': attribute type 10 has an invalid length. [ 588.743291][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.751640][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.759232][ T30] audit: type=1326 audit(1750642495.728:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 588.801329][ T30] audit: type=1326 audit(1750642495.748:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 588.864044][ T5834] Bluetooth: hci1: command tx timeout [ 588.870681][ T1606] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 588.926663][ T30] audit: type=1326 audit(1750642495.958:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 589.861902][ T30] audit: type=1326 audit(1750642496.048:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 589.888662][ T1606] scsi host1: usb-storage 4-1:1.0 [ 589.940110][ T30] audit: type=1326 audit(1750642496.338:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 589.969507][ T30] audit: type=1326 audit(1750642496.338:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 590.132250][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1090'. [ 590.141368][ T30] audit: type=1326 audit(1750642496.338:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 590.171232][ T49] veth1_macvtap: left promiscuous mode [ 590.186371][ T30] audit: type=1326 audit(1750642496.338:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 590.223903][ T49] veth0_macvtap: left promiscuous mode [ 590.448172][ T30] audit: type=1326 audit(1750642496.338:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b58e929 code=0x7ffc0000 [ 590.981568][ T5925] usb 4-1: USB disconnect, device number 6 [ 591.632502][T10813] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1095'. [ 592.041373][ T49] team0 (unregistering): Port device team_slave_1 removed [ 592.122097][ T49] team0 (unregistering): Port device team_slave_0 removed [ 593.253118][T10827] CIFS: Unable to determine destination address [ 593.860232][T10789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.874465][T10789] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 594.190171][T10719] chnl_net:caif_netlink_parms(): no params data found [ 596.918957][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 596.918978][ T30] audit: type=1326 audit(1750642504.468:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 597.022181][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.042463][ T30] audit: type=1326 audit(1750642504.508:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 597.074490][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.090058][T10719] bridge_slave_0: entered allmulticast mode [ 597.115477][T10719] bridge_slave_0: entered promiscuous mode [ 597.142056][ T30] audit: type=1326 audit(1750642504.508:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 597.325862][ T5971] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 597.388373][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.448786][ T30] audit: type=1326 audit(1750642504.508:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 597.565151][ T5971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.750066][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.922972][ T5971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 597.951364][T10719] bridge_slave_1: entered allmulticast mode [ 598.206406][T10719] bridge_slave_1: entered promiscuous mode [ 598.215788][ T5971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 598.238511][ T30] audit: type=1326 audit(1750642504.508:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 598.240461][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 598.297075][ T5971] usb 1-1: SerialNumber: syz [ 598.347906][ T5971] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 598.361773][ T30] audit: type=1326 audit(1750642504.508:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 598.372011][ T5971] usb-storage 1-1:1.0: USB Mass Storage device detected [ 598.561039][ T30] audit: type=1326 audit(1750642504.508:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 598.685614][ T5971] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 599.144212][ T5971] scsi host1: usb-storage 1-1:1.0 [ 599.404592][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.121571][ T30] audit: type=1326 audit(1750642504.518:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 600.182842][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.265118][ T30] audit: type=1326 audit(1750642504.518:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 600.300049][ T30] audit: type=1326 audit(1750642504.518:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa1858e929 code=0x7ffc0000 [ 600.391176][T10889] CIFS: Unable to determine destination address [ 600.554547][T10894] netlink: 'syz.3.1112': attribute type 10 has an invalid length. [ 601.378796][T10719] team0: Port device team_slave_0 added [ 601.439102][T10719] team0: Port device team_slave_1 added [ 601.845807][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1114'. [ 601.931560][ T5925] usb 1-1: USB disconnect, device number 16 [ 602.719974][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.642181][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.672193][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.685763][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.692710][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.826388][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.146764][T10920] overlayfs: overlapping lowerdir path [ 605.671375][T10719] hsr_slave_0: entered promiscuous mode [ 606.015432][T10719] hsr_slave_1: entered promiscuous mode [ 606.391173][T10941] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.184370][ T5925] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 607.267339][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1124'. [ 608.034209][ T5925] usb 4-1: device descriptor read/64, error -71 [ 608.304366][ T5925] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 608.318566][T10960] CIFS: Unable to determine destination address [ 608.704388][ T5925] usb 4-1: device descriptor read/64, error -71 [ 608.854533][ T5925] usb usb4-port1: attempt power cycle [ 609.130767][T10961] sctp: failed to load transform for md5: -2 [ 609.186733][T10972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.394542][ T5918] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 609.683695][ T5918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 609.938654][ T5918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 610.178609][ T5918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 610.360260][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 610.398971][ T5918] usb 1-1: SerialNumber: syz [ 610.594603][ T5918] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 610.640370][ T5918] usb-storage 1-1:1.0: USB Mass Storage device detected [ 610.704689][ T5918] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 610.951412][ T5918] scsi host1: usb-storage 1-1:1.0 [ 613.082586][T11011] ieee802154 phy0 wpan0: encryption failed: -22 [ 613.724372][ T6065] usb 1-1: USB disconnect, device number 17 [ 614.351878][T11022] CIFS: Unable to determine destination address [ 614.864519][T11024] loop5: detected capacity change from 0 to 8 [ 614.888074][T11024] SQUASHFS error: Unable to read inode 0x127 [ 615.424459][ T5918] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 616.346005][ T5918] usb 10-1: Using ep0 maxpacket: 8 [ 616.374754][T11042] binder: 11040:11042 ioctl c0306201 2000000003c0 returned -14 [ 616.392019][ T5918] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 616.410320][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.433714][ T5918] usb 10-1: Product: syz [ 616.443536][ T5918] usb 10-1: Manufacturer: syz [ 616.469207][ T5918] usb 10-1: SerialNumber: syz [ 616.494660][ T5918] usb 10-1: config 0 descriptor?? [ 616.556598][ T5918] gspca_main: se401-2.14.0 probing 047d:5003 [ 616.909975][T11054] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.951684][ T5918] gspca_se401: Bayer format not supported! [ 617.276281][ T5918] usb 10-1: USB disconnect, device number 4 [ 617.913863][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.239983][T11072] CIFS: Unable to determine destination address [ 618.713412][T10719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 619.947608][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.002664][T10719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 620.039484][T10719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 620.111043][T10719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 620.242692][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.245295][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.264408][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.272722][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.291156][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.299192][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.374195][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.704280][T11104] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 620.771644][T11104] nbd: error processing sock list [ 620.804239][ T5925] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 620.879114][T11104] block nbd0: shutting down sockets [ 621.023014][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 621.071713][ T5925] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 621.092747][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.116579][ T5925] usb 6-1: Product: syz [ 621.129717][ T5925] usb 6-1: Manufacturer: syz [ 621.145482][ T5925] usb 6-1: SerialNumber: syz [ 621.292227][ T5925] usb 6-1: config 0 descriptor?? [ 621.373554][ T5925] gspca_main: se401-2.14.0 probing 047d:5003 [ 621.608330][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 621.629973][ T49] bridge_slave_1: left allmulticast mode [ 621.636389][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 621.649867][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 621.670750][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 621.679157][ T49] bridge_slave_1: left promiscuous mode [ 621.688264][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 621.733467][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.773815][ T49] bridge_slave_0: left allmulticast mode [ 621.781295][ T49] bridge_slave_0: left promiscuous mode [ 621.787750][ T5925] gspca_se401: Bayer format not supported! [ 621.793828][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.992823][ T5918] usb 6-1: USB disconnect, device number 12 [ 622.197772][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.208890][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.220045][ T49] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 622.232890][ T49] bond0 (unregistering): Released all slaves [ 622.355449][ T5143] Bluetooth: hci2: command tx timeout [ 622.378681][ T49] tipc: Left network mode [ 623.704661][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.711054][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.717622][ T5143] Bluetooth: hci4: command tx timeout [ 623.803958][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.013272][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.201343][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.208557][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.434623][ T5143] Bluetooth: hci2: command tx timeout [ 624.480039][T11160] loop5: detected capacity change from 0 to 64 [ 624.497040][T11087] chnl_net:caif_netlink_parms(): no params data found [ 624.810426][ T49] hsr_slave_0: left promiscuous mode [ 624.840023][ T49] hsr_slave_1: left promiscuous mode [ 624.865142][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.872553][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.376993][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.514572][ T6065] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 625.558895][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.660708][T11170] sctp: failed to load transform for md5: -2 [ 625.690879][ T49] veth1_macvtap: left promiscuous mode [ 625.736483][ T49] veth0_macvtap: left promiscuous mode [ 625.794925][ T5143] Bluetooth: hci4: command tx timeout [ 625.824820][ T6065] usb 10-1: Using ep0 maxpacket: 8 [ 625.867970][ T6065] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 625.914240][ T6065] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.922968][ T6065] usb 10-1: Product: syz [ 625.974952][ T6065] usb 10-1: Manufacturer: syz [ 625.989863][ T6065] usb 10-1: SerialNumber: syz [ 626.023945][ T6065] usb 10-1: config 0 descriptor?? [ 626.072373][ T6065] gspca_main: se401-2.14.0 probing 047d:5003 [ 626.484831][ T6065] gspca_se401: Bayer format not supported! [ 626.514575][ T5143] Bluetooth: hci2: command tx timeout [ 626.694955][ T6065] usb 10-1: USB disconnect, device number 5 [ 627.376440][ T49] team0 (unregistering): Port device team_slave_1 removed [ 627.521743][ T49] team0 (unregistering): Port device team_slave_0 removed [ 627.884958][ T5143] Bluetooth: hci4: command tx timeout [ 628.594320][ T5143] Bluetooth: hci2: command tx timeout [ 628.818529][T11207] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1186'. [ 629.954327][ T5143] Bluetooth: hci4: command tx timeout [ 630.345758][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.352926][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.983543][T11221] loop5: detected capacity change from 0 to 512 [ 631.041860][T11221] ======================================================= [ 631.041860][T11221] WARNING: The mand mount option has been deprecated and [ 631.041860][T11221] and is ignored by this kernel. Remove the mand [ 631.041860][T11221] option from the mount to silence this warning. [ 631.041860][T11221] ======================================================= [ 631.208106][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.647445][T11221] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1191: iget: bad extended attribute block 1 [ 631.800114][T11221] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1191: couldn't read orphan inode 15 (err -117) [ 632.002719][T11221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.664937][T11233] sctp: failed to load transform for md5: -2 [ 632.710617][T10719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.904756][ T6065] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 633.007369][T11087] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.034611][T11087] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.053765][T11087] bridge_slave_0: entered allmulticast mode [ 633.074942][ T6065] usb 6-1: Using ep0 maxpacket: 32 [ 633.088454][ T49] IPVS: stop unused estimator thread 0... [ 633.096626][ T6065] usb 6-1: config 0 interface 0 has no altsetting 0 [ 633.103284][ T6065] usb 6-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 633.113893][T11087] bridge_slave_0: entered promiscuous mode [ 633.143652][T11087] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.193346][ T6065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.223808][T11087] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.260753][T11215] loop9: detected capacity change from 0 to 40427 [ 633.281595][ T6065] usb 6-1: config 0 descriptor?? [ 633.303731][T11215] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 633.306656][T11087] bridge_slave_1: entered allmulticast mode [ 633.490388][T11215] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 634.002159][T11087] bridge_slave_1: entered promiscuous mode [ 634.038434][T11215] F2FS-fs (loop9): invalid crc value [ 634.104493][ T6065] usb 6-1: can't set config #0, error -71 [ 634.187094][ T6065] usb 6-1: USB disconnect, device number 13 [ 634.237620][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.364471][T11115] chnl_net:caif_netlink_parms(): no params data found [ 634.561386][T11087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.666965][T11087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.198454][T11283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1200'. [ 636.645195][T11087] team0: Port device team_slave_0 added [ 636.698698][T11286] loop5: detected capacity change from 0 to 128 [ 636.851197][T11121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 636.875414][T11286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 636.882630][T11286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 636.894733][T11121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 636.905362][T11121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 636.924685][T11121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 636.932593][T11121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 636.936407][T11087] team0: Port device team_slave_1 added [ 636.996678][T11286] EXT4-fs (loop5): Test dummy encryption mode enabled [ 637.296427][T11286] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 637.673439][T11286] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 637.980684][T11286] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 638.151526][T11286] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 638.382724][T11309] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1204'. [ 638.818781][T11087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.839262][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.913472][T11087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.005919][T11121] Bluetooth: hci6: command tx timeout [ 639.213174][T11087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.261137][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.356253][T11087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.490164][T11115] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.543357][T11115] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.568450][T11115] bridge_slave_0: entered allmulticast mode [ 639.592972][T11115] bridge_slave_0: entered promiscuous mode [ 639.700643][T11115] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.733847][T11115] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.765594][T11115] bridge_slave_1: entered allmulticast mode [ 639.787314][T11115] bridge_slave_1: entered promiscuous mode [ 641.203066][T11121] Bluetooth: hci6: command tx timeout [ 643.234290][T11121] Bluetooth: hci6: command tx timeout [ 643.926587][T11115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.957829][T11115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.686937][T11087] hsr_slave_0: entered promiscuous mode [ 644.693610][T11087] hsr_slave_1: entered promiscuous mode [ 645.314826][T11121] Bluetooth: hci6: command tx timeout [ 645.693364][T11087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.707177][T11087] Cannot create hsr debugfs directory [ 646.254370][T11121] Bluetooth: hci3: command 0x0406 tx timeout [ 646.893110][T11361] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1215'. [ 647.349577][T11364] nbd: must specify at least one socket [ 647.497687][T11115] team0: Port device team_slave_0 added [ 647.508346][T11115] team0: Port device team_slave_1 added [ 650.135858][T11115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.143327][T11115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.191707][T11115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.208000][T11390] loop9: detected capacity change from 0 to 256 [ 650.275921][T11115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.285014][T11115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.091583][T11390] FAT-fs (loop9): Directory bread(block 64) failed [ 651.147485][T11115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.160315][T11390] FAT-fs (loop9): Directory bread(block 65) failed [ 651.285797][T11390] FAT-fs (loop9): Directory bread(block 66) failed [ 651.303746][T11390] FAT-fs (loop9): Directory bread(block 67) failed [ 651.324836][T11390] FAT-fs (loop9): Directory bread(block 68) failed [ 651.359979][T11390] FAT-fs (loop9): Directory bread(block 69) failed [ 651.383470][T11390] FAT-fs (loop9): Directory bread(block 70) failed [ 651.431588][T11390] FAT-fs (loop9): Directory bread(block 71) failed [ 651.450083][T11390] FAT-fs (loop9): Directory bread(block 72) failed [ 651.458248][T11390] FAT-fs (loop9): Directory bread(block 73) failed [ 651.566610][T11115] hsr_slave_0: entered promiscuous mode [ 651.573145][T11115] hsr_slave_1: entered promiscuous mode [ 651.657043][T11115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.733619][T11115] Cannot create hsr debugfs directory [ 652.353395][ T5941] bridge_slave_1: left allmulticast mode [ 652.366994][ T5941] bridge_slave_1: left promiscuous mode [ 652.374026][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.389010][ T5941] bridge_slave_0: left allmulticast mode [ 652.396741][ T5941] bridge_slave_0: left promiscuous mode [ 652.402693][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.444212][ T5932] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 652.605882][ T5932] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 652.614616][ T5932] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 652.623683][ T5932] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 652.648076][ T5932] usb 10-1: config 220 has no interface number 2 [ 652.655541][ T5932] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 652.680585][ T5932] usb 10-1: config 220 interface 0 has no altsetting 0 [ 652.697802][ T5932] usb 10-1: config 220 interface 76 has no altsetting 0 [ 652.705417][ T5932] usb 10-1: config 220 interface 1 has no altsetting 0 [ 652.725778][ T5932] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 652.735094][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.743387][ T5932] usb 10-1: Product: syz [ 652.748038][ T5932] usb 10-1: Manufacturer: syz [ 652.755492][ T5932] usb 10-1: SerialNumber: syz [ 652.859390][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.875212][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.886277][ T5941] bond0 (unregistering): Released all slaves [ 653.050262][ T5932] usb 10-1: selecting invalid altsetting 0 [ 653.069750][ T5932] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 653.077095][ T5932] usb 10-1: No valid video chain found. [ 653.108371][ T5932] usb 10-1: selecting invalid altsetting 0 [ 653.124620][ T5932] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 653.142557][ T5932] usb 10-1: USB disconnect, device number 6 [ 653.332382][ T5941] hsr_slave_0: left promiscuous mode [ 653.364823][ T5941] hsr_slave_1: left promiscuous mode [ 653.385215][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.415048][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.046659][ T5941] team0 (unregistering): Port device team_slave_1 removed [ 656.449432][T11439] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1231'. [ 656.533340][ T5941] team0 (unregistering): Port device team_slave_0 removed [ 659.048692][T11453] loop0: detected capacity change from 0 to 40427 [ 659.112774][T11453] F2FS-fs (loop0): invalid crc value [ 659.308057][T11287] chnl_net:caif_netlink_parms(): no params data found [ 660.136430][T11453] F2FS-fs (loop0): Start checkpoint disabled! [ 660.209159][T11453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 661.576542][ T6060] kworker/u8:9: attempt to access beyond end of device [ 661.576542][ T6060] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 661.620083][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 661.620116][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 661.620133][ T6060] Workqueue: writeback wb_workfn (flush-7:0) [ 661.620174][ T6060] Call Trace: [ 661.620184][ T6060] [ 661.620194][ T6060] dump_stack_lvl+0x189/0x250 [ 661.620241][ T6060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.620278][ T6060] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 661.620320][ T6060] ? __pfx_queue_work_on+0x10/0x10 [ 661.620345][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.620374][ T6060] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 661.620409][ T6060] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 661.620446][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.620473][ T6060] ? f2fs_hw_is_readonly+0x39b/0x470 [ 661.620511][ T6060] f2fs_handle_critical_error+0x37c/0x540 [ 661.620552][ T6060] f2fs_write_end_io+0x495/0x810 [ 661.620584][ T6060] ? blkg_put+0x22/0x240 [ 661.620632][ T6060] __submit_merged_bio+0x27a/0x6a0 [ 661.620671][ T6060] __submit_merged_write_cond+0x255/0x530 [ 661.620712][ T6060] f2fs_write_data_pages+0x261d/0x3000 [ 661.620794][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 661.620848][ T6060] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 661.620884][ T6060] ? stack_trace_save+0x9c/0xe0 [ 661.620960][ T6060] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 661.621011][ T6060] ? trace_f2fs_writepages+0x7f/0x200 [ 661.621044][ T6060] ? f2fs_write_node_pages+0x478/0x6e0 [ 661.621081][ T6060] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 661.621120][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.621158][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 661.621194][ T6060] do_writepages+0x32e/0x550 [ 661.621239][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.621267][ T6060] ? reacquire_held_locks+0x127/0x1d0 [ 661.621296][ T6060] ? writeback_sb_inodes+0x372/0x1000 [ 661.621347][ T6060] __writeback_single_inode+0x145/0xff0 [ 661.621386][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.621414][ T6060] ? do_raw_spin_unlock+0x122/0x240 [ 661.621451][ T6060] writeback_sb_inodes+0x6b5/0x1000 [ 661.621509][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.621555][ T6060] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 661.621655][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.621682][ T6060] ? rcu_is_watching+0x15/0xb0 [ 661.621721][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.621762][ T6060] wb_writeback+0x43b/0xaf0 [ 661.621813][ T6060] ? queue_io+0x301/0x590 [ 661.621857][ T6060] ? __pfx_wb_writeback+0x10/0x10 [ 661.621908][ T6060] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.621951][ T6060] wb_workfn+0x409/0xef0 [ 661.622006][ T6060] ? __pfx_wb_workfn+0x10/0x10 [ 661.622045][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.622073][ T6060] ? __lock_acquire+0xab9/0xd20 [ 661.622125][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.622158][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.622192][ T6060] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.622224][ T6060] ? process_scheduled_works+0x9ef/0x17b0 [ 661.622262][ T6060] ? process_scheduled_works+0x9ef/0x17b0 [ 661.622309][ T6060] process_scheduled_works+0xae1/0x17b0 [ 661.622391][ T6060] ? __pfx_process_scheduled_works+0x10/0x10 [ 661.622441][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.622482][ T6060] worker_thread+0x8a0/0xda0 [ 661.622527][ T6060] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 661.622574][ T6060] ? __kthread_parkme+0x7b/0x200 [ 661.622613][ T6060] kthread+0x711/0x8a0 [ 661.622648][ T6060] ? __pfx_worker_thread+0x10/0x10 [ 661.622687][ T6060] ? __pfx_kthread+0x10/0x10 [ 661.622712][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.622746][ T6060] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.622778][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.622806][ T6060] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.622841][ T6060] ? __pfx_kthread+0x10/0x10 [ 661.622871][ T6060] ret_from_fork+0x3fc/0x770 [ 661.622912][ T6060] ? __pfx_ret_from_fork+0x10/0x10 [ 661.622958][ T6060] ? __switch_to_asm+0x39/0x70 [ 661.622983][ T6060] ? __switch_to_asm+0x33/0x70 [ 661.623008][ T6060] ? __pfx_kthread+0x10/0x10 [ 661.623038][ T6060] ret_from_fork_asm+0x1a/0x30 [ 661.623090][ T6060] [ 661.623099][ T6060] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 662.306916][T11287] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.314076][T11287] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.528066][T11287] bridge_slave_0: entered allmulticast mode [ 662.540896][T11287] bridge_slave_0: entered promiscuous mode [ 662.661251][T11287] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.691017][T11287] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.716878][T11287] bridge_slave_1: entered allmulticast mode [ 662.766910][T11287] bridge_slave_1: entered promiscuous mode [ 662.977211][T11287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.120362][T11087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 663.195913][T11087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 663.246333][T11484] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1244'. [ 663.284325][T11287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.384382][T11488] loop9: detected capacity change from 0 to 2048 [ 663.431457][T11488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.506010][T11488] overlayfs: upper fs needs to support d_type. [ 663.518927][T11488] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 663.528671][T11087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 663.564865][T11488] overlayfs: failed to set xattr on upper [ 663.574863][T11488] overlayfs: ...falling back to redirect_dir=nofollow. [ 663.583469][T11488] overlayfs: ...falling back to index=off. [ 663.597383][T11488] overlayfs: ...falling back to uuid=null. [ 663.605959][T11488] overlayfs: ...falling back to xino=off. [ 663.671510][ T9703] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh [ 663.683216][ T9703] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh [ 663.698216][T11287] team0: Port device team_slave_0 added [ 663.706941][T11087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 665.392107][T11287] team0: Port device team_slave_1 added [ 665.644284][T11511] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1253'. [ 666.063469][T11287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.093778][T11287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.134679][T11287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.495081][T11287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.517484][T11287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.563062][T11287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.666016][ T6728] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.338302][T11525] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1258'. [ 667.988180][T11287] hsr_slave_0: entered promiscuous mode [ 668.005392][T11287] hsr_slave_1: entered promiscuous mode [ 668.012296][T11121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 668.022801][T11121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 668.370144][ T6728] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.642648][T11121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 668.671237][T11121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 668.696253][T11121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 669.188797][ T6728] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.552187][ T6728] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.712120][T11115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.730415][T11115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.782387][T11115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.835572][ T5964] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 669.872590][T11115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 670.014988][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 670.028487][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 670.056266][ T5964] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 670.079614][ T5964] usb 1-1: config 12 has no interface number 0 [ 670.087440][ T5964] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 670.101773][ T5964] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 670.109288][T11087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.121636][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.140906][ T5964] usb 1-1: Product: syz [ 670.145751][ T5964] usb 1-1: Manufacturer: syz [ 670.156239][ T6728] bridge_slave_1: left allmulticast mode [ 670.163695][ T6728] bridge_slave_1: left promiscuous mode [ 670.171650][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.174365][ T5964] usb 1-1: SerialNumber: syz [ 670.189933][ T6728] bridge_slave_0: left allmulticast mode [ 670.202416][ T6728] bridge_slave_0: left promiscuous mode [ 670.211933][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.509417][T11547] befs: (nullb0): No write support. Marking filesystem read-only [ 670.518597][T11547] befs: (nullb0): invalid magic header [ 670.755344][T11121] Bluetooth: hci1: command tx timeout [ 671.112810][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.195182][ T5964] usb 1-1: USB disconnect, device number 18 [ 671.269639][T11559] udevd[11559]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.402312][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.413746][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.426760][ T6728] bond0 (unregistering): Released all slaves [ 671.614982][T11087] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.201856][T11570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1269'. [ 672.864234][T11121] Bluetooth: hci1: command tx timeout [ 673.230966][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.238195][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.312066][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.319292][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.612405][ T6728] hsr_slave_0: left promiscuous mode [ 673.640422][ T6728] hsr_slave_1: left promiscuous mode [ 673.649246][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.663501][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.693621][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.702599][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.736891][ T6728] veth1_macvtap: left promiscuous mode [ 673.744954][ T6728] veth0_macvtap: left promiscuous mode [ 673.750616][ T6728] veth1_vlan: left promiscuous mode [ 673.756004][ T6728] veth0_vlan: left promiscuous mode [ 674.629470][T11582] openvswitch: netlink: EtherType 0 is less than min 600 [ 674.954189][T11121] Bluetooth: hci1: command tx timeout [ 675.634603][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 676.123496][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 676.756642][T11599] loop0: detected capacity change from 0 to 512 [ 676.778448][T11599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 676.823915][T11599] EXT4-fs (loop0): orphan cleanup on readonly fs [ 676.861721][T11599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1277: bg 0: block 248: padding at end of block bitmap is not set [ 676.905454][T11599] __quota_error: 44 callbacks suppressed [ 676.905500][T11599] Quota error (device loop0): write_blk: dquota write failed [ 676.919753][T11599] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 676.929977][T11599] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1277: Failed to acquire dquot type 1 [ 676.968317][T11599] EXT4-fs (loop0): 1 truncate cleaned up [ 677.001413][T11599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 677.051959][T11121] Bluetooth: hci1: command tx timeout [ 678.110779][T11087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.221653][T11287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 678.292838][T11287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 678.363180][T11287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 678.480844][T11115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.543704][T11287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 678.832808][T11115] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.006442][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.068064][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.075250][ T6725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.126256][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.133446][ T6725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.192195][T11529] chnl_net:caif_netlink_parms(): no params data found [ 679.591781][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 679.642549][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 679.653391][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 679.676032][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 679.695546][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 680.322083][T11115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.333001][T11115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.643585][T11629] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1280'. [ 681.644044][T11529] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.684341][T11529] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.691544][T11529] bridge_slave_0: entered allmulticast mode [ 681.737050][T11529] bridge_slave_0: entered promiscuous mode [ 681.794352][ T5143] Bluetooth: hci3: command tx timeout [ 681.957155][T11121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.968343][T11121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.979749][T11121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.989492][T11121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.997331][T11121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.036235][T11529] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.055130][T11529] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.062360][T11529] bridge_slave_1: entered allmulticast mode [ 682.089303][T11529] bridge_slave_1: entered promiscuous mode [ 682.229816][T11633] loop0: detected capacity change from 0 to 32768 [ 682.411732][T11633] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=4,compression=lz4,degraded=no,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 682.411766][T11633] allowing incompatible features above 0.0: (unknown version) [ 682.411781][T11633] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 682.485442][T11529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.604416][T11633] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 682.612895][T11633] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 682.625211][T11633] bcachefs (loop0): Version upgrade required: [ 682.625211][T11633] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 682.625211][T11633] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 682.625211][T11633] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 682.741023][T11529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.776375][T11633] bcachefs (loop0): dropping and reconstructing all alloc info [ 682.828516][T11633] bcachefs (loop0): accounting_read... done [ 682.863698][T11633] bcachefs (loop0): alloc_read... done [ 682.901976][T11633] bcachefs (loop0): snapshots_read... done [ 682.909732][T11633] bcachefs (loop0): done starting filesystem [ 683.082567][T11617] chnl_net:caif_netlink_parms(): no params data found [ 683.090955][ T5840] bcachefs (loop0): shutting down [ 683.180193][T11529] team0: Port device team_slave_0 added [ 683.192000][ T5840] bcachefs (loop0): shutdown complete [ 683.207689][T11529] team0: Port device team_slave_1 added [ 683.324433][T11529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.331507][T11529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.414490][T11529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.445412][T11529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.452349][T11529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.484598][T11529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.847375][T11529] hsr_slave_0: entered promiscuous mode [ 683.864803][T11529] hsr_slave_1: entered promiscuous mode [ 683.874476][T11121] Bluetooth: hci3: command tx timeout [ 683.881531][T11529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.889378][T11529] Cannot create hsr debugfs directory [ 684.005833][T11287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.040738][T11121] Bluetooth: hci2: command tx timeout [ 684.297210][ T6728] bridge_slave_1: left allmulticast mode [ 684.302904][ T6728] bridge_slave_1: left promiscuous mode [ 684.309737][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.320591][ T6728] bridge_slave_0: left allmulticast mode [ 684.326705][ T6728] bridge_slave_0: left promiscuous mode [ 684.332462][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.769048][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.788114][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.808793][ T6728] bond0 (unregistering): Released all slaves [ 684.862154][T11287] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.960279][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.975848][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.983254][T11617] bridge_slave_0: entered allmulticast mode [ 684.999132][T11617] bridge_slave_0: entered promiscuous mode [ 685.051626][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.060222][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.068612][T11617] bridge_slave_1: entered allmulticast mode [ 685.083283][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.089748][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.146475][T11617] bridge_slave_1: entered promiscuous mode [ 685.313500][ T6728] hsr_slave_0: left promiscuous mode [ 685.319952][ T6728] hsr_slave_1: left promiscuous mode [ 685.333711][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.363284][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.954364][T11121] Bluetooth: hci3: command tx timeout [ 686.115431][T11121] Bluetooth: hci2: command tx timeout [ 686.875805][ T6065] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 687.213361][T11672] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1291'. [ 687.845081][ T6065] usb 1-1: device descriptor read/64, error -71 [ 687.855684][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 687.889152][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 688.035162][T11121] Bluetooth: hci3: command tx timeout [ 688.096127][ T6065] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 688.194607][T11121] Bluetooth: hci2: command tx timeout [ 688.209788][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.216953][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.224851][ T6065] usb 1-1: device descriptor read/64, error -71 [ 688.337582][ T6065] usb usb1-port1: attempt power cycle [ 688.347373][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.367126][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.406204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.413388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.470261][T11287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.490703][T11287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.046364][T11684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1293'. [ 689.251447][T11617] team0: Port device team_slave_0 added [ 689.646645][T11617] team0: Port device team_slave_1 added [ 689.809616][T11638] chnl_net:caif_netlink_parms(): no params data found [ 690.046205][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.053192][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.082123][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.100582][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.112722][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.142151][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.276357][T11121] Bluetooth: hci2: command tx timeout [ 690.684615][ T6065] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 690.698212][T11617] hsr_slave_0: entered promiscuous mode [ 690.711228][T11617] hsr_slave_1: entered promiscuous mode [ 690.718183][T11617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.738097][T11617] Cannot create hsr debugfs directory [ 690.851291][ T6065] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.883394][ T6065] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.908661][ T6065] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 690.934276][ T6065] usb 1-1: Product: syz [ 690.938464][ T6065] usb 1-1: Manufacturer: syz [ 690.943067][ T6065] usb 1-1: SerialNumber: syz [ 690.976527][ T6065] usb 1-1: config 0 descriptor?? [ 691.081602][ T6065] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 691.121038][T11560] udevd[11560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.174195][T11287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.521135][T11703] netlink: 'syz.0.1297': attribute type 1 has an invalid length. [ 692.156539][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 692.222555][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.251542][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.265379][T11638] bridge_slave_0: entered allmulticast mode [ 692.294254][T11638] bridge_slave_0: entered promiscuous mode [ 692.353899][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.370068][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.380056][T11638] bridge_slave_1: entered allmulticast mode [ 692.393735][T11638] bridge_slave_1: entered promiscuous mode [ 692.638533][T11638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.703370][T11638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.825722][T11529] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 692.849263][T11529] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 692.883096][T11638] team0: Port device team_slave_0 added [ 692.898834][T11638] team0: Port device team_slave_1 added [ 692.966009][T11529] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 693.075483][T11529] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 693.098856][T11638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.108000][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.137766][T11638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.153719][ T6728] bridge_slave_1: left allmulticast mode [ 693.162009][ T6728] bridge_slave_1: left promiscuous mode [ 693.169812][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.185774][ T6728] bridge_slave_0: left allmulticast mode [ 693.192312][ T6728] bridge_slave_0: left promiscuous mode [ 693.205999][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.553916][ T5964] usb 1-1: USB disconnect, device number 22 [ 694.086882][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.145017][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.145116][ T90] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 694.202657][ T6728] bond0 (unregistering): Released all slaves [ 694.334574][ T90] usb 1-1: device descriptor read/64, error -71 [ 694.353604][T11638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.380245][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.431082][T11638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.483259][ T6728] hsr_slave_0: left promiscuous mode [ 694.493525][ T6728] hsr_slave_1: left promiscuous mode [ 694.505195][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.523984][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.594720][ T90] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 694.736734][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 694.746046][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 694.753780][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 694.761303][ T90] usb 1-1: device descriptor read/64, error -71 [ 694.780652][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 694.790934][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.892791][ T90] usb usb1-port1: attempt power cycle [ 694.985760][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 695.021414][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 695.340248][T11732] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1303'. [ 695.836989][ T90] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 695.878918][ T90] usb 1-1: device descriptor read/8, error -71 [ 696.124301][ T90] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 696.222322][ T90] usb 1-1: device descriptor read/8, error -71 [ 696.293962][T11638] hsr_slave_0: entered promiscuous mode [ 696.304718][T11638] hsr_slave_1: entered promiscuous mode [ 696.311160][T11638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.319273][T11638] Cannot create hsr debugfs directory [ 696.357844][ T90] usb usb1-port1: unable to enumerate USB device [ 696.845447][T11121] Bluetooth: hci4: command tx timeout [ 697.181557][T11529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.248593][T11529] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.532670][T11617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 697.689774][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.697021][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.739967][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.747185][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.829332][T11617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 697.861427][T11617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 697.890849][T11617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 698.018800][T11529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.033963][T11529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.424592][ T90] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 698.502565][T11529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.594529][ T90] usb 1-1: Using ep0 maxpacket: 8 [ 698.769703][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1312'. [ 698.955752][T11121] Bluetooth: hci4: command tx timeout [ 699.249618][ T90] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 699.264191][ T90] usb 1-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 699.290486][ T90] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.306395][ T90] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.316056][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.337668][ T90] usbtmc 1-1:16.0: bulk endpoints not found [ 699.690764][T11726] chnl_net:caif_netlink_parms(): no params data found [ 700.205725][T11726] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.224332][T11726] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.241030][T11726] bridge_slave_0: entered allmulticast mode [ 700.258566][T11726] bridge_slave_0: entered promiscuous mode [ 700.277519][T11726] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.284898][T11726] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.292124][T11726] bridge_slave_1: entered allmulticast mode [ 700.300233][T11726] bridge_slave_1: entered promiscuous mode [ 700.472240][ T6728] bridge_slave_1: left allmulticast mode [ 700.482613][ T6728] bridge_slave_1: left promiscuous mode [ 700.492604][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.571544][ T6728] bridge_slave_0: left allmulticast mode [ 700.589682][ T6728] bridge_slave_0: left promiscuous mode [ 700.638861][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.044235][T11121] Bluetooth: hci4: command tx timeout [ 701.244750][ T6065] usb 1-1: USB disconnect, device number 27 [ 701.438562][T11817] No control pipe specified [ 701.878039][T11826] fuse: Bad value for 'fd' [ 702.337810][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.371224][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.389658][ T6728] bond0 (unregistering): Released all slaves [ 702.441045][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.464999][T11823] slcan: can't register candev [ 702.469979][T11823] Falling back ldisc for ttyS3. [ 702.498888][T11726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.614318][T11638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 702.700656][T11726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.744001][ T6728] hsr_slave_0: left promiscuous mode [ 702.760614][ T6728] hsr_slave_1: left promiscuous mode [ 702.784947][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.811344][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.077065][T11121] Bluetooth: hci4: command tx timeout [ 703.763195][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 703.814457][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 704.244208][T11638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 704.260653][T11638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 704.341352][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.373439][T11638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 704.391340][T11879] overlayfs: missing 'lowerdir' [ 704.541945][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.549153][ T6798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.561588][T11529] veth0_vlan: entered promiscuous mode [ 704.572824][T11726] team0: Port device team_slave_0 added [ 704.583400][T11726] team0: Port device team_slave_1 added [ 704.637209][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.644465][ T6798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.347202][T11726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.631507][T11896] sctp: failed to load transform for md5: -2 [ 705.652297][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.414735][T11726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.433015][T11726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.440662][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.476238][T11726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.850647][T11529] veth1_vlan: entered promiscuous mode [ 707.023196][T11726] hsr_slave_0: entered promiscuous mode [ 707.046172][T11726] hsr_slave_1: entered promiscuous mode [ 707.283859][T11910] loop0: detected capacity change from 0 to 32768 [ 707.353520][T11529] veth0_macvtap: entered promiscuous mode [ 707.470119][T11910] JBD2: Ignoring recovery information on journal [ 707.493254][T11529] veth1_macvtap: entered promiscuous mode [ 707.509356][T11910] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 707.518069][T11910] JBD2: bad block at offset 32 [ 707.603622][T11910] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 707.663287][T11529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.822224][T11529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.878087][ T5840] ocfs2: Unmounting device (7,0) on (node local) [ 707.888964][T11937] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1336'. [ 707.913565][T11529] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.959345][T11529] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.002299][T11529] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.024207][T11529] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.085451][T11638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.219910][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.266882][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.349237][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.356436][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.410176][T11945] overlayfs: missing 'lowerdir' [ 708.849941][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.857152][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.543406][ T6726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.575320][ T6726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.932798][ T6725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.966099][ T6725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.083096][T11617] veth0_vlan: entered promiscuous mode [ 710.395496][T11617] veth1_vlan: entered promiscuous mode [ 710.473166][T11726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 710.686285][T11726] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 710.799951][T11726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 710.961645][T11617] veth0_macvtap: entered promiscuous mode [ 710.972424][T11617] veth1_macvtap: entered promiscuous mode [ 711.122561][T11726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 711.234335][ T90] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 711.276342][T11638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.365576][T11617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.405225][ T90] usb 1-1: Using ep0 maxpacket: 8 [ 711.408531][T11617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.412593][ T90] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 711.442170][T11975] loop8: detected capacity change from 0 to 32768 [ 711.471367][T11617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.486528][ T90] usb 1-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 711.492497][T11975] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1257 (11975) [ 711.514238][T11617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.534166][T11617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.542866][T11617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.572009][ T90] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 711.596137][T11975] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 711.634508][ T90] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 711.646005][T11975] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 711.667339][T11975] BTRFS info (device loop8): disk space caching is enabled [ 711.689462][ T90] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 711.703704][T11975] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 711.764851][ T90] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 711.773908][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.870021][T11638] veth0_vlan: entered promiscuous mode [ 711.914059][ T90] usbtmc 1-1:16.0: bulk endpoints not found [ 712.117289][T11638] veth1_vlan: entered promiscuous mode [ 712.161225][T11975] BTRFS info (device loop8): rebuilding free space tree [ 712.358949][T11975] BTRFS info (device loop8): disabling free space tree [ 712.396552][T11975] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 712.441259][ T6726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.469770][T11975] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 712.494596][ T6726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.516745][T11726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.535429][T11638] veth0_macvtap: entered promiscuous mode [ 712.634640][T11638] veth1_macvtap: entered promiscuous mode [ 712.677845][T11975] BTRFS info (device loop8): balance: start -s [ 712.722856][T12026] ------------[ cut here ]------------ [ 712.729045][T12026] BTRFS: Transaction aborted (error -28) [ 712.769164][T11726] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.787325][T11638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.789235][T12026] WARNING: CPU: 1 PID: 12026 at fs/btrfs/block-group.c:3990 btrfs_chunk_alloc+0xf4d/0x1150 [ 712.804724][T12026] Modules linked in: [ 712.808816][T12026] CPU: 1 UID: 0 PID: 12026 Comm: syz.8.1257 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 712.821046][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.831268][T12026] RIP: 0010:btrfs_chunk_alloc+0xf4d/0x1150 [ 712.837161][T12026] Code: 48 c7 c6 c0 b2 cf 8b 44 89 f2 e8 8e 41 42 fd e9 b5 fc ff ff e8 84 75 d8 fd 90 48 c7 c7 60 b2 cf 8b 44 89 f6 e8 54 1f 9c fd 90 <0f> 0b 90 90 e9 96 fc ff ff e8 65 75 d8 fd eb 05 e8 5e 75 d8 fd 48 [ 712.839915][ T6726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.856987][T12026] RSP: 0018:ffffc900048bf210 EFLAGS: 00010246 [ 712.857019][T12026] RAX: 2a4e684643b20b00 RBX: 0000000000000000 RCX: 0000000000080000 [ 712.857041][T12026] RDX: ffffc9000ee34000 RSI: 00000000000060fa RDI: 00000000000060fb [ 712.889226][T12026] RBP: 00000000ffffff01 R08: 0000000000000003 R09: 0000000000000004 [ 712.898196][T12026] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888052391250 [ 712.907147][T12026] R13: ffff88802fc96000 R14: ffffffffffffffe4 R15: ffff888051340000 [ 712.916440][T12026] FS: 00007f41dce8d6c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 712.925998][T12026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.932598][T12026] CR2: 00007ff5dc903c10 CR3: 000000005f9e4000 CR4: 0000000000350ef0 [ 712.939866][ T6726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.941239][T12026] Call Trace: [ 712.951839][T12026] [ 712.954923][T12026] find_free_extent+0x4bb2/0x5810 [ 712.960995][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.967593][T12026] ? btrfs_get_alloc_profile+0xb45/0xd30 [ 712.973303][T12026] ? __pfx_btrfs_get_alloc_profile+0x10/0x10 [ 712.979458][T12026] btrfs_reserve_extent+0x2fd/0x670 [ 712.984800][T12026] ? __pfx_btrfs_reserve_extent+0x10/0x10 [ 712.990614][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.996425][T12026] ? do_raw_spin_unlock+0x122/0x240 [ 713.001660][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.007392][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.013059][T12026] ? btrfs_use_block_rsv+0x2f5/0x860 [ 713.018459][T12026] btrfs_alloc_tree_block+0x1e7/0x12b0 [ 713.023957][T12026] ? __pfx_hlock_conflict+0x10/0x10 [ 713.029268][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.035001][T12026] ? check_path+0x21/0x40 [ 713.039349][T12026] ? check_noncircular+0xe0/0x160 [ 713.044484][T12026] ? lockdep_unlock+0x50/0x120 [ 713.049282][T12026] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 713.055486][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.061145][T12026] ? read_extent_buffer+0x120/0x680 [ 713.067364][T12026] btrfs_force_cow_block+0x575/0x1e10 [ 713.072782][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.079640][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.085368][T12026] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 713.091231][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.096965][T12026] ? down_write_nested+0x169/0x200 [ 713.102106][T12026] ? __pfx_down_write_nested+0x10/0x10 [ 713.107669][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.113347][T12026] btrfs_cow_block+0x40a/0x830 [ 713.118299][T12026] btrfs_search_slot+0xcd7/0x2d90 [ 713.123472][T12026] ? __pfx_btrfs_search_slot+0x10/0x10 [ 713.129049][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.134750][T12026] ? rcu_is_watching+0x15/0xb0 [ 713.139558][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.145282][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.150947][T12026] ? btrfs_update_root+0xbe/0xbf0 [ 713.156315][T12026] btrfs_update_root+0xf2/0xbf0 [ 713.161237][T12026] ? __pfx_btrfs_update_root+0x10/0x10 [ 713.167859][T12026] ? _btrfs_ioctl_set_received_subvol+0x33a/0xae0 [ 713.175247][T12026] _btrfs_ioctl_set_received_subvol+0x565/0xae0 [ 713.181571][T12026] btrfs_ioctl_set_received_subvol+0x8d/0x100 [ 713.187763][T12026] ? __pfx_btrfs_ioctl+0x10/0x10 [ 713.192739][T12026] __se_sys_ioctl+0xfc/0x170 [ 713.197465][T12026] do_syscall_64+0xfa/0x3b0 [ 713.201991][T12026] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.207298][T12026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.213392][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.219149][T12026] ? exc_page_fault+0x9f/0xf0 [ 713.223877][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.229874][T12026] RIP: 0033:0x7f41dbf8e929 [ 713.235085][T12026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.254791][T12026] RSP: 002b:00007f41dce8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.263229][T12026] RAX: ffffffffffffffda RBX: 00007f41dc1b6080 RCX: 00007f41dbf8e929 [ 713.272298][T12026] RDX: 0000200000000000 RSI: 00000000c0c89425 RDI: 0000000000000008 [ 713.281261][T12026] RBP: 00007f41dc010b39 R08: 0000000000000000 R09: 0000000000000000 [ 713.289320][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.297372][T12026] R13: 0000000000000001 R14: 00007f41dc1b6080 R15: 00007ffe84bd1cb8 [ 713.305511][T12026] [ 713.308548][T12026] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 713.315833][T12026] CPU: 1 UID: 0 PID: 12026 Comm: syz.8.1257 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 713.327906][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.337969][T12026] Call Trace: [ 713.341264][T12026] [ 713.344206][T12026] dump_stack_lvl+0x99/0x250 [ 713.348829][T12026] ? __asan_memcpy+0x40/0x70 [ 713.353446][T12026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.358678][T12026] ? __pfx__printk+0x10/0x10 [ 713.363295][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.368952][T12026] panic+0x2db/0x790 [ 713.372873][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.378527][T12026] ? __pfx_panic+0x10/0x10 [ 713.382998][T12026] __warn+0x31b/0x4b0 [ 713.387005][T12026] ? btrfs_chunk_alloc+0xf4d/0x1150 [ 713.392231][T12026] ? btrfs_chunk_alloc+0xf4d/0x1150 [ 713.397452][T12026] report_bug+0x2be/0x4f0 [ 713.401809][T12026] ? btrfs_chunk_alloc+0xf4d/0x1150 [ 713.407032][T12026] ? btrfs_chunk_alloc+0xf4d/0x1150 [ 713.412254][T12026] ? btrfs_chunk_alloc+0xf4f/0x1150 [ 713.417477][T12026] handle_bug+0x84/0x160 [ 713.421740][T12026] exc_invalid_op+0x1a/0x50 [ 713.426258][T12026] asm_exc_invalid_op+0x1a/0x20 [ 713.431119][T12026] RIP: 0010:btrfs_chunk_alloc+0xf4d/0x1150 [ 713.436949][T12026] Code: 48 c7 c6 c0 b2 cf 8b 44 89 f2 e8 8e 41 42 fd e9 b5 fc ff ff e8 84 75 d8 fd 90 48 c7 c7 60 b2 cf 8b 44 89 f6 e8 54 1f 9c fd 90 <0f> 0b 90 90 e9 96 fc ff ff e8 65 75 d8 fd eb 05 e8 5e 75 d8 fd 48 [ 713.456568][T12026] RSP: 0018:ffffc900048bf210 EFLAGS: 00010246 [ 713.462656][T12026] RAX: 2a4e684643b20b00 RBX: 0000000000000000 RCX: 0000000000080000 [ 713.470636][T12026] RDX: ffffc9000ee34000 RSI: 00000000000060fa RDI: 00000000000060fb [ 713.478608][T12026] RBP: 00000000ffffff01 R08: 0000000000000003 R09: 0000000000000004 [ 713.486578][T12026] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888052391250 [ 713.494547][T12026] R13: ffff88802fc96000 R14: ffffffffffffffe4 R15: ffff888051340000 [ 713.502558][T12026] find_free_extent+0x4bb2/0x5810 [ 713.507594][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.513272][T12026] ? btrfs_get_alloc_profile+0xb45/0xd30 [ 713.518925][T12026] ? __pfx_btrfs_get_alloc_profile+0x10/0x10 [ 713.524927][T12026] btrfs_reserve_extent+0x2fd/0x670 [ 713.530142][T12026] ? __pfx_btrfs_reserve_extent+0x10/0x10 [ 713.535882][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.541515][T12026] ? do_raw_spin_unlock+0x122/0x240 [ 713.546719][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.552351][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.557989][T12026] ? btrfs_use_block_rsv+0x2f5/0x860 [ 713.563277][T12026] btrfs_alloc_tree_block+0x1e7/0x12b0 [ 713.568741][T12026] ? __pfx_hlock_conflict+0x10/0x10 [ 713.573947][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.579588][T12026] ? check_path+0x21/0x40 [ 713.583914][T12026] ? check_noncircular+0xe0/0x160 [ 713.588943][T12026] ? lockdep_unlock+0x50/0x120 [ 713.593714][T12026] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 713.599625][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.605260][T12026] ? read_extent_buffer+0x120/0x680 [ 713.610464][T12026] btrfs_force_cow_block+0x575/0x1e10 [ 713.615852][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.621503][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.627147][T12026] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 713.632966][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.638602][T12026] ? down_write_nested+0x169/0x200 [ 713.643715][T12026] ? __pfx_down_write_nested+0x10/0x10 [ 713.649170][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.654810][T12026] btrfs_cow_block+0x40a/0x830 [ 713.659596][T12026] btrfs_search_slot+0xcd7/0x2d90 [ 713.664660][T12026] ? __pfx_btrfs_search_slot+0x10/0x10 [ 713.670127][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.675759][T12026] ? rcu_is_watching+0x15/0xb0 [ 713.680536][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.686173][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.691809][T12026] ? btrfs_update_root+0xbe/0xbf0 [ 713.696875][T12026] btrfs_update_root+0xf2/0xbf0 [ 713.701738][T12026] ? __pfx_btrfs_update_root+0x10/0x10 [ 713.707214][T12026] ? _btrfs_ioctl_set_received_subvol+0x33a/0xae0 [ 713.713635][T12026] _btrfs_ioctl_set_received_subvol+0x565/0xae0 [ 713.719894][T12026] btrfs_ioctl_set_received_subvol+0x8d/0x100 [ 713.725973][T12026] ? __pfx_btrfs_ioctl+0x10/0x10 [ 713.730914][T12026] __se_sys_ioctl+0xfc/0x170 [ 713.735518][T12026] do_syscall_64+0xfa/0x3b0 [ 713.740016][T12026] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.745221][T12026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.751285][T12026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.756918][T12026] ? exc_page_fault+0x9f/0xf0 [ 713.761607][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.767502][T12026] RIP: 0033:0x7f41dbf8e929 [ 713.771914][T12026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.791520][T12026] RSP: 002b:00007f41dce8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.799938][T12026] RAX: ffffffffffffffda RBX: 00007f41dc1b6080 RCX: 00007f41dbf8e929 [ 713.807906][T12026] RDX: 0000200000000000 RSI: 00000000c0c89425 RDI: 0000000000000008 [ 713.815875][T12026] RBP: 00007f41dc010b39 R08: 0000000000000000 R09: 0000000000000000 [ 713.823842][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.831807][T12026] R13: 0000000000000001 R14: 00007f41dc1b6080 R15: 00007ffe84bd1cb8 [ 713.839794][T12026] [ 713.843030][T12026] Kernel Offset: disabled [ 713.847351][T12026] Rebooting in 86400 seconds..