last executing test programs: 29m58.638449575s ago: executing program 32 (id=16): r0 = socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000580)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x2000000) 28m43.10768066s ago: executing program 33 (id=115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 27m50.421587465s ago: executing program 34 (id=163): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000008940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, 0x0, 0x0, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 26m51.422858377s ago: executing program 35 (id=206): r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102368, 0x18fe0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f00000192c0)={0x2020}, 0x2020) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000dad000/0x3000)=nil, 0x4000) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f000001b4c0)={0x8, {{0xa, 0x4e22, 0x3, @local, 0x4}}, {{0xa, 0x3a3b, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffff001}}}, 0x108) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f000001b300)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x6, 0xa, 0x9}, {0xffa9, 0x8, 0x2}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000001b340), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f000001b3c0)={0x0, 0x0, &(0x7f000001b400)={&(0x7f000001b440)={0x54, r6, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 25m0.891926066s ago: executing program 36 (id=268): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x4c142, 0x0) truncate(0x0, 0x2fffffd) syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sysfs$3(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x842, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) sysfs$3(0x3) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x40040, 0xd2, 0xf}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) openat$procfs(0xffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 19m16.481531439s ago: executing program 37 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="4c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a300000000005000500020000000500010006000000672c954575ce0fd5e6acda20f6bb0e9fb42e7cd1f2b6efdede55b6b0ff0d8e901b7ee98582880c730a1d30a137cb5457247014b5400cda508bc95938e5ca95f3847db8"], 0x4c}}, 0x20000044) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x20008840}, 0x4c0c1) socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20040400) r2 = openat$procfs(0xffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x20, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001240)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) r3 = syz_clone(0x20000, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f00000002c0)={0x2, &(0x7f0000000300)=[{0x19}, {0x29, '\x00', @buffer={"d767bacaafe9683f87a3cf4e4e18de4aef4f219460433cae3f75b05dbd913a6c", 0x20}, 0x6}]}) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f00000012c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, 0x0, &(0x7f0000001340)) sendmsg$nl_route(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x69f, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001480)={'bond0\x00'}) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xba, 0xb0, 0x7f, "", [{{0x9, 0x4, 0x0, 0xbb, 0x2, 0x2, 0x6, 0x0, 0x5f, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0xffff, 0xe}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x3, 0x8}}}}}]}}]}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) sendmsg$nl_route(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 16m40.830957078s ago: executing program 9 (id=544): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000000c0), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0], 0x97) 16m39.299391677s ago: executing program 9 (id=547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) 16m37.354855994s ago: executing program 9 (id=548): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x7, 0x9, 0x0, 0x1000}, {0x16, 0x2, 0xf3, 0x30000000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x42, 0x836d9fb164f927b3) prlimit64(0x0, 0xe, &(0x7f0000002ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002b00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002b40)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000002b80)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000002bc0), 0x0, 0x0) read$msr(r2, &(0x7f0000002c00)=""/102400, 0x19000) mount$9p_tcp(0x0, &(0x7f000001bc00)='.\x00', 0x0, 0x8010, 0x0) syz_open_dev$vcsu(0x0, 0x105, 0x200000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001bc40)={0x18, 0x5, &(0x7f000001bd00)=ANY=[@ANYBLOB], 0x0, 0xfffffff8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) shmctl$SHM_STAT(0x0, 0xd, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f000001bd40)={'lo\x00'}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f000001be40)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) epoll_create1(0x80000) syz_mount_image$squashfs(&(0x7f000001bec0), &(0x7f000001bf00)='./file1\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0x1, 0x184, &(0x7f000001c1c0)="$eJzskL9OKkEUxr/ZXfbCLW4uya1oILlGsVCWRY2x0RJ7H0ACKxIX/7AkAqFYYgyFhbH0CXgNE19AC0Os6UwoqKwMZnbODsMzOL9iv51zvnPmnDkNroJfAL5m/SoOEGHiD14ZgwUgy0Rsagh9IH0jvReCF/IdUvyGNBN0e2cV3/daub0c0ovAnH3OBYD0BPsDA9Oo1XjWr/KfYwDcZQOoAR9pAKrHfLeii0QnIGMB/6Il5tLDHfywBqDQbl4Wgm5vo9Gs1L26d+66pR1ny3G23cJJw/cc8bVpL15Oq4DrOgD+XillhASAW/L8pnwMU0ajPFNrbeUN8/+xhIGU/I97MDzJ2vgeE8ARVpEEcB2yRXQsuliIViqDwaRD0VLmE65klNisXvi1IRhYXDaCJXsUJxhQge+5EyRkprQbxqMOSVdIy6Qj5Rk5WXs5YEUd7uiUD+MRW0Vu7CTj/p1Ku91ybfn3N4TSiN/6aCwv92xAo9FoNBqNRqPRaH463wEAAP//Mu15jw==") 16m28.359806174s ago: executing program 9 (id=556): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000004000000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000003914b36998af1d27d44156756f74f30000000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) sendto(r2, &(0x7f0000000440)="01", 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000540)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000480)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200047fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000198c0), 0xffffffffffffffff) shutdown(r6, 0x1) 16m21.795729563s ago: executing program 9 (id=561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f00000005c0)="d4c44034", 0x4}], 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 16m16.123621553s ago: executing program 9 (id=567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0xd3, @any, 0x3}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 16m0.796700819s ago: executing program 38 (id=567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0xd3, @any, 0x3}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15m54.504681037s ago: executing program 6 (id=581): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x10001, 0x4}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/dev\x00') pread64(r3, &(0x7f0000000bc0)=""/102356, 0x18fd4, 0x143) 15m44.110347372s ago: executing program 6 (id=590): pipe(0x0) io_cancel(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_open_dev$vim2m(0x0, 0x20000001, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 15m43.330112097s ago: executing program 6 (id=593): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) 15m41.552145914s ago: executing program 6 (id=594): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000000480)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000019880), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000019480), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000019780)={0x1, 0x4, &(0x7f0000019840)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15m38.800153281s ago: executing program 6 (id=596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0xd3, @any, 0x3}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000000480)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmp(&(0x7f0000019480), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000019500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000019780)={0x1, 0x4, &(0x7f0000019840)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x3, 0x4) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15m37.367013823s ago: executing program 6 (id=597): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28381815fefd5435dc1d30cf319cbd7000fedbdf25"], 0x28}}, 0x20040080) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000a80)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000980), 0x0, 0x802) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000a40)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000004c0)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000bc0)=@newtfilter={0xac, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xb}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_EMATCHES={0x78, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x27, 0x8, 0x7}, {0x2, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="552780e0", @TCF_META_TYPE_VAR="5b0a3e5729f7afd187f9", @TCF_META_TYPE_VAR="fabf44863cee", @TCF_META_TYPE_VAR="3088a901", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="cf5f2cf6", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0x2, 0x1}, {0x9, 0x3}}}]}}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x41}) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2460e6"], 0x64) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/cpu_byteorder', 0x0, 0x60) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\t', 0x1}], 0x1}}], 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a70000000060a01060000000000000000020000000900010021944639ddd94d620900020073797a300000000048000480440001800a0001006d6174636800000034000280090001006c3274700000000008000240000000001c000300000000000000000000000000000000000000000000000000140000001100010000000000000002000200000a"], 0x9c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x2, 0x2, 0x1240, r9, 0x8000, '\x00', r5, r9, 0x4, 0x3, 0x0, 0x8}, 0x50) 15m22.103235875s ago: executing program 39 (id=597): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28381815fefd5435dc1d30cf319cbd7000fedbdf25"], 0x28}}, 0x20040080) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000a80)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000980), 0x0, 0x802) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000a40)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000004c0)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000bc0)=@newtfilter={0xac, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xb}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_EMATCHES={0x78, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x27, 0x8, 0x7}, {0x2, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="552780e0", @TCF_META_TYPE_VAR="5b0a3e5729f7afd187f9", @TCF_META_TYPE_VAR="fabf44863cee", @TCF_META_TYPE_VAR="3088a901", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="cf5f2cf6", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0x2, 0x1}, {0x9, 0x3}}}]}}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x41}) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2460e6"], 0x64) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/cpu_byteorder', 0x0, 0x60) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\t', 0x1}], 0x1}}], 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a70000000060a01060000000000000000020000000900010021944639ddd94d620900020073797a300000000048000480440001800a0001006d6174636800000034000280090001006c3274700000000008000240000000001c000300000000000000000000000000000000000000000000000000140000001100010000000000000002000200000a"], 0x9c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x2, 0x2, 0x1240, r9, 0x8000, '\x00', r5, r9, 0x4, 0x3, 0x0, 0x8}, 0x50) 11m48.393937113s ago: executing program 3 (id=738): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodiscard}, {@barrier}]}, 0xfe, 0x559a, &(0x7f00000144c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d67e, 0x0) open(&(0x7f0000000bc0)='./bus\x00', 0x1c927e, 0x12) write$P9_RLERRORu(r0, &(0x7f00000004c0)=ANY=[], 0x16) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000440)={0x0, 0xfffffffeffc, 0x1, 0x5ec7}) 11m46.494928095s ago: executing program 3 (id=739): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = getpgrp(0x0) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) 11m43.454921478s ago: executing program 3 (id=743): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 11m40.828769773s ago: executing program 3 (id=745): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000400)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f000001b440)='./mnt/fillfile\x00', 0x42, 0x9f) write(r3, &(0x7f000001b480)="000102", 0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ptrace$pokeuser(0x6, r5, 0x388, 0x7fffffff) ptrace$pokeuser(0x6, r5, 0x358, 0x4000000000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 11m36.785860092s ago: executing program 3 (id=748): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r3 = getpgrp(0x0) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) 11m27.734851357s ago: executing program 3 (id=751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts={0x2f}]}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1b, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @local, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x5, [{@loopback, 0xf4}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x24, 0x6a, 0x501, 0xfffffe02, 0x25dfdbfb, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x58}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0xe0002018}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000007c0)={{0x2, 0x4e22, @remote}, {0x306, @random="b0c352c6376e"}, 0x0, {0x2, 0x4e24, @multicast2}, 'syzkaller1\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11m27.121958321s ago: executing program 40 (id=751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts={0x2f}]}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1b, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @local, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x5, [{@loopback, 0xf4}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x24, 0x6a, 0x501, 0xfffffe02, 0x25dfdbfb, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x58}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0xe0002018}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000007c0)={{0x2, 0x4e22, @remote}, {0x306, @random="b0c352c6376e"}, 0x0, {0x2, 0x4e24, @multicast2}, 'syzkaller1\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11m9.865666055s ago: executing program 0 (id=758): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000003914b36998af1d27d44156756f74f30000000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r1, &(0x7f0000000440)="01", 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000480)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), r4) syz_genetlink_get_family_id$tipc2(&(0x7f00000198c0), r4) shutdown(r3, 0x1) 11m7.816881008s ago: executing program 0 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 11m2.136661257s ago: executing program 0 (id=760): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10m57.308570799s ago: executing program 0 (id=761): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000400)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f000001b440)='./mnt/fillfile\x00', 0x42, 0x9f) write(r3, &(0x7f000001b480)="000102", 0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ptrace$pokeuser(0x6, r5, 0x388, 0x7fffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x28981ff, 0x0) 10m55.680967127s ago: executing program 0 (id=762): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) close(0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0xf0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 10m49.213806393s ago: executing program 0 (id=763): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x19, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) 10m48.736638115s ago: executing program 41 (id=763): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x19, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) 10m30.047704644s ago: executing program 2 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts={0x2f}]}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x11, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1f, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @local, @multicast2, @local, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x5, [{@loopback, 0xf4}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffe02, 0x25dfdbfb, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0xe0002018}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000007c0)={{0x2, 0x4e22, @remote}, {0x306, @random="b0c352c6376e"}, 0x0, {0x2, 0x4e24, @multicast2}, 'syzkaller1\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10m26.895355237s ago: executing program 2 (id=776): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodiscard}, {@barrier}]}, 0xfe, 0x559a, &(0x7f00000144c0)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = open(&(0x7f0000000bc0)='./bus\x00', 0x1c927e, 0x12) fallocate(r0, 0x0, 0x0, 0x1000f4) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x16) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)={0x0, 0xfffffffeffc, 0x1, 0x5ec7}) 10m23.44792759s ago: executing program 7 (id=133): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000fa", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000140)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x5}}}, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000240)={"0a1f63c5b66cd5dcb742729a656027dc", 0x0, 0x0, {0x9, 0xb}, {0xfffffffffffff9b4, 0x8}, 0x1, [0x7fff, 0x7, 0x6, 0x0, 0x1ff, 0x8a, 0x0, 0x6, 0x9, 0xf, 0x4d, 0x2, 0x7, 0x101, 0x8001, 0x3]}) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x80, 0x68, 0x2, "0a1e2c", 0x1, 0x2}, {@any, 0x1, 0xc0, 0xf4, "378ea7", 0x4, 0x18}, {@any, 0x4, 0x0, 0x7, "764414", 0x0, 0x81}, {@none, 0x7f, 0x7, 0x94, "7df660", 0x9, 0x1}, {@any, 0x69, 0x3, 0x7, "ef3fe2", 0x267, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x8, 0x3, "0785e2", 0xffff, 0x9}, {@none, 0x6, 0x6, 0x2, "2926d0", 0x9, 0x10}, {@none, 0x6, 0x7, 0x9, "23e20d", 0x8f, 0x6}]}}}, 0x7c) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2c41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000001b00)=r5) umount2(&(0x7f0000001b40)='./file0\x00', 0x2) sendmsg$nl_generic(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x2405c084) sendmsg$inet(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x5, 0x7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000b00)={{r1}, r2, 0xa, @inherit={0x78, &(0x7f0000000300)={0x0, 0x6, 0x0, 0x0, {0x12, 0x81, 0x401, 0xb1, 0x1}, [0x40, 0x4, 0x80000001, 0x6, 0xffffffffffffff7e, 0x6e]}}, @devid=r7}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x300, r10, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e40)) 10m20.939696689s ago: executing program 2 (id=781): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000193c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) set_mempolicy(0x6, 0x0, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2010040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000019b40)={0x2020}, 0xfffffed9) 10m18.641024447s ago: executing program 2 (id=782): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) 10m18.064352058s ago: executing program 7 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) 10m15.939914021s ago: executing program 7 (id=786): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000400)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f000001b440)='./mnt/fillfile\x00', 0x42, 0x9f) write(r3, &(0x7f000001b480)="000102", 0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) ptrace(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ptrace$pokeuser(0x6, 0x0, 0x388, 0x7fffffff) ptrace$pokeuser(0x6, 0x0, 0x358, 0x4000000000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x28981ff, 0x0) 10m10.991008261s ago: executing program 7 (id=794): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x10001, 0x4}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local}, 0xc) syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5, 0x5ea, &(0x7f0000000580)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/dev\x00') pread64(r3, &(0x7f0000000bc0)=""/102356, 0x18fd4, 0x143) 10m6.424191914s ago: executing program 42 (id=794): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x10001, 0x4}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local}, 0xc) syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5, 0x5ea, &(0x7f0000000580)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/dev\x00') pread64(r3, &(0x7f0000000bc0)=""/102356, 0x18fd4, 0x143) 10m6.358455258s ago: executing program 2 (id=798): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES8=r3, @ANYRES64=r4], 0x0, 0x32, 0x0, 0x1000000}, 0x28) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x5) 10m5.018658424s ago: executing program 2 (id=802): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r3 = getpgrp(0x0) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, 0x0, 0x0, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) 10m2.050264665s ago: executing program 43 (id=802): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r3 = getpgrp(0x0) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, 0x0, 0x0, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) 8m23.976006305s ago: executing program 4 (id=887): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x8) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xb5f0, 0x23, 0x83, "00020000000000000000ffff1000"}) r3 = syz_open_pts(r2, 0x40000) r4 = dup3(r3, r2, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) read$FUSE(r4, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f000001a300)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f000001a380)={0x0, 0x3938700}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x28, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) 8m21.89592298s ago: executing program 4 (id=891): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) socket$inet6(0xa, 0x5, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x5) write$dsp(r4, &(0x7f0000000100)="5cba91a4", 0xffffffd9) 8m15.614638075s ago: executing program 4 (id=893): socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) getpid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000032680), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000326c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000032700)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000032780)={0x7, 0x8, 0xfa00, {r3, 0x1}}, 0x10) 8m6.434702737s ago: executing program 4 (id=901): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102368, 0x18fe0) gettid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000019900)={0x9, {"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", 0x1000}}, 0x1006) 8m4.379768548s ago: executing program 4 (id=902): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) r4 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES8=r3, @ANYRES64=r4], 0x0, 0x32, 0x0, 0x1000000}, 0x28) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x5) write$dsp(r5, &(0x7f0000000100)="5cba91a4", 0xffffffd9) 7m52.902253996s ago: executing program 4 (id=911): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local}, 0xc) syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5, 0x5ea, &(0x7f0000000580)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/dev\x00') pread64(r3, &(0x7f0000000bc0)=""/102356, 0x18fd4, 0x143) 7m37.086356023s ago: executing program 44 (id=911): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local}, 0xc) syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5, 0x5ea, &(0x7f0000000580)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/dev\x00') pread64(r3, &(0x7f0000000bc0)=""/102356, 0x18fd4, 0x143) 3m51.05857176s ago: executing program 1 (id=1099): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000020c40)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000020c80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000020cc0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000020d00)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000020d40)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000020d80)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000021e40), r3) 3m46.969987305s ago: executing program 1 (id=1103): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x8) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x482, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f000001a300)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f000001a380)={0x0, 0x3938700}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) r4 = socket(0x28, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) 3m38.58109001s ago: executing program 1 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_create_resource$futex(&(0x7f0000000200)=0x1) r4 = syz_create_resource$futex(&(0x7f0000000240)=0x1) futex(r4, 0xb, 0x1, 0x0, r3, 0x403) 3m35.904528197s ago: executing program 1 (id=1110): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r2 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r3 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r3, 0xb, 0x1, 0x0, r2, 0x403) futex(r3, 0xc, 0x1, 0x0, r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r4 = getpgrp(0x0) kcmp(r4, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) 3m32.207003729s ago: executing program 1 (id=1114): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0xd3, @any, 0x3}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000019880), 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000019480), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000019500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000019780)={0x1, 0x4, &(0x7f0000019840)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180)=0x3, 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m30.590600174s ago: executing program 1 (id=1116): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000000200)=""/102368, 0x18fe0) gettid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019340)={0x11, 0x8, 0x0, &(0x7f0000019440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x7376c40bedd761a3, 0xa}, 0x94) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000019900)={0x9, {"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", 0x1000}}, 0x1006) 3m15.218217732s ago: executing program 45 (id=1116): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000000200)=""/102368, 0x18fe0) gettid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019340)={0x11, 0x8, 0x0, &(0x7f0000019440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x7376c40bedd761a3, 0xa}, 0x94) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000019900)={0x9, {"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", 0x1000}}, 0x1006) 15.40370308s ago: executing program 5 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000580)={@link_local, @broadcast, @void, {@llc={0x4, {@llc={0x42, 0xff, '2'}}}}}, 0x0) 15.174215477s ago: executing program 5 (id=1250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) 13.143674634s ago: executing program 5 (id=1251): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') preadv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/187, 0xbb}], 0x1, 0x1a, 0x0) r3 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r4 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r4, 0xb, 0x1, 0x0, r3, 0x403) futex(r4, 0xc, 0x1, 0x0, r3, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = getpgrp(0x0) kcmp(r5, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) 12.583433461s ago: executing program 8 (id=1253): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x1804008, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 12.343419834s ago: executing program 8 (id=1254): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000600)=0x5) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r3, &(0x7f0000001dc0)=""/102392, 0x18ff8) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f000001adc0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f000001af00)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000"], 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f000001afc0)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f000001b100)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e24, 0x4, @local, 0x4}}}, 0x108) 10.13261291s ago: executing program 8 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='proc\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000400)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0017"], 0xc0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000180)) 5.022389811s ago: executing program 8 (id=1256): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000001480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001a480)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000640)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000680)={@hyper}) 3.070919918s ago: executing program 8 (id=1257): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000004b00)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) creat(&(0x7f000000e680)='./bus\x00', 0x0) mount(&(0x7f0000004c80)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000004cc0)='./bus\x00', &(0x7f0000004d00)='cifs\x00', 0x0, &(0x7f0000000400)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=0\xf3\xba\x91\x13\x8a\x92r\x90bE\x88\x8e/rooers=2.1,nodfs\x00\x00\x00\x00') r1 = accept(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000004f40)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 1.869105487s ago: executing program 5 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000019e00)={@remote, 0x4, 0x0, 0x2, 0x0, 0x9}, 0x20) 1.776000036s ago: executing program 8 (id=1259): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, 0x0, 0x0, 0x0) 1.751679297s ago: executing program 5 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) 0s ago: executing program 5 (id=1261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0xd3, @any, 0x3}, 0xe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000019500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000019780)={0x1, 0x4, &(0x7f0000019840)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): s in 'hsr' [ 1361.959512][T13881] Cannot create hsr debugfs directory [ 1362.092598][T13910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.092620][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.092653][T13910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.255682][T13910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.255699][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.255722][T13910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.111790][T13910] hsr_slave_0: entered promiscuous mode [ 1363.114252][T13910] hsr_slave_1: entered promiscuous mode [ 1363.114851][T13910] debugfs: 'hsr0' already exists in 'hsr' [ 1363.114865][T13910] Cannot create hsr debugfs directory [ 1363.948719][ T8258] Bluetooth: hci5: link tx timeout [ 1363.948743][ T8258] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1363.950711][ T5642] Bluetooth: hci5: link tx timeout [ 1363.950729][ T5642] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1363.950759][ T5642] Bluetooth: hci5: link tx timeout [ 1363.950772][ T5642] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1363.950801][ T5642] Bluetooth: hci5: link tx timeout [ 1363.950814][ T5642] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1363.950843][ T5642] Bluetooth: hci5: link tx timeout [ 1363.950855][ T5642] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1363.951945][ T5642] Bluetooth: hci5: link tx timeout [ 1363.951961][ T5642] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1365.972619][ T5642] Bluetooth: hci5: command 0x0406 tx timeout [ 1368.248030][T14215] loop8: detected capacity change from 0 to 512 [ 1368.341812][T14215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.341945][T14215] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.388163][ T30] audit: type=1800 audit(1794221561.718:7113): pid=14215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.839" name="file1" dev="loop8" ino=15 res=0 errno=-22 [ 1371.465695][T13104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.043055][T14232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.191801][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1372.218530][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1372.230242][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1372.244893][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1372.247023][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1374.382551][ T5642] Bluetooth: hci6: command tx timeout [ 1376.453859][ T5642] Bluetooth: hci6: command tx timeout [ 1378.532842][ T8258] Bluetooth: hci6: command tx timeout [ 1378.720608][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1378.731318][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1378.732528][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1378.754448][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1378.755250][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1380.612761][ T8258] Bluetooth: hci6: command tx timeout [ 1380.772713][ T8258] Bluetooth: hci7: command tx timeout [ 1380.812880][T14235] rxe_eth0 speed is unknown, defaulting to 1000 [ 1382.853699][ T8258] Bluetooth: hci7: command tx timeout [ 1384.502334][T13881] netdevsim netdevsim9: probe with driver netdevsim failed with error -12 [ 1384.968183][ T8258] Bluetooth: hci7: command tx timeout [ 1386.549758][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 1387.013322][ T5642] Bluetooth: hci7: command tx timeout [ 1388.780750][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 1389.723128][T14266] rxe_eth0 speed is unknown, defaulting to 1000 [ 1392.174826][T14332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1392.288087][ T62] bridge_slave_1: left allmulticast mode [ 1392.288112][ T62] bridge_slave_1: left promiscuous mode [ 1392.288294][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.436973][ T62] bridge_slave_0: left allmulticast mode [ 1392.437008][ T62] bridge_slave_0: left promiscuous mode [ 1392.441278][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.836343][T14347] netlink: 64 bytes leftover after parsing attributes in process `syz.5.859'. [ 1393.930874][ T8258] Bluetooth: hci0: command 0x0406 tx timeout [ 1394.120358][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.276604][T14342] nvme_fabrics: missing parameter 'transport=%s' [ 1394.276641][T14342] nvme_fabrics: missing parameter 'nqn=%s' [ 1394.345832][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.370234][ T62] bond0 (unregistering): Released all slaves [ 1405.331119][ T62] hsr_slave_0: left promiscuous mode [ 1405.341849][ T62] hsr_slave_1: left promiscuous mode [ 1405.344546][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.975653][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.486118][T14412] loop4: detected capacity change from 0 to 1024 [ 1408.889103][T14416] jffs2: notice: (14416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1409.094875][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1409.270750][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1410.124246][T14423] jffs2: notice: (14423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1410.351638][T14235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.352042][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.352232][T14235] bridge_slave_0: entered allmulticast mode [ 1410.379540][T14235] bridge_slave_0: entered promiscuous mode [ 1410.392132][T14235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.400937][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.401133][T14235] bridge_slave_1: entered allmulticast mode [ 1410.419723][T14235] bridge_slave_1: entered promiscuous mode [ 1410.721760][T14429] jffs2: notice: (14429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1410.907290][T14235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.923338][T14235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.316286][T14235] team0: Port device team_slave_0 added [ 1411.328561][T14235] team0: Port device team_slave_1 added [ 1411.606170][T14235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.606194][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.606229][T14235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.976826][T14235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.976848][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.976879][T14235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.041600][ T62] bridge_slave_1: left allmulticast mode [ 1412.041631][ T62] bridge_slave_1: left promiscuous mode [ 1412.041860][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.102664][ T62] bridge_slave_0: left allmulticast mode [ 1412.102696][ T62] bridge_slave_0: left promiscuous mode [ 1412.102908][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.070880][T13296] hid-generic 0005:0006:0330.0003: item fetching failed at offset 3/4 [ 1413.081039][T13296] hid-generic 0005:0006:0330.0003: probe with driver hid-generic failed with error -22 [ 1414.766375][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.756279][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.849086][ T62] bond0 (unregistering): Released all slaves [ 1422.363132][T14266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.363248][T14266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.363401][T14266] bridge_slave_0: entered allmulticast mode [ 1422.409928][T14266] bridge_slave_0: entered promiscuous mode [ 1422.538852][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.538902][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.601036][T14235] hsr_slave_0: entered promiscuous mode [ 1422.623304][T14235] hsr_slave_1: entered promiscuous mode [ 1422.639617][T14235] debugfs: 'hsr0' already exists in 'hsr' [ 1422.639638][T14235] Cannot create hsr debugfs directory [ 1422.660340][T14266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.660523][T14266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.660668][T14266] bridge_slave_1: entered allmulticast mode [ 1422.723349][T14266] bridge_slave_1: entered promiscuous mode [ 1423.217229][T14266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.420007][T14266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.520705][ T62] hsr_slave_0: left promiscuous mode [ 1423.534166][ T62] hsr_slave_1: left promiscuous mode [ 1423.541931][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.555263][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.463269][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1427.697959][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1429.330751][T14266] team0: Port device team_slave_0 added [ 1429.360905][T14266] team0: Port device team_slave_1 added [ 1430.629157][T14266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.629180][T14266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.629213][T14266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.747972][T14266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.747990][T14266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.748014][T14266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.057037][T14266] hsr_slave_0: entered promiscuous mode [ 1433.057868][T14266] hsr_slave_1: entered promiscuous mode [ 1433.062224][T14266] debugfs: 'hsr0' already exists in 'hsr' [ 1433.062238][T14266] Cannot create hsr debugfs directory [ 1435.390274][ T8258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1435.393541][ T8258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1435.400859][ T8258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1435.419364][ T8258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1435.420114][ T8258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1437.492532][ T5642] Bluetooth: hci3: command tx timeout [ 1438.484537][ T1114] bridge_slave_1: left allmulticast mode [ 1438.484567][ T1114] bridge_slave_1: left promiscuous mode [ 1438.484816][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.561909][ T1114] bridge_slave_0: left allmulticast mode [ 1438.561943][ T1114] bridge_slave_0: left promiscuous mode [ 1438.562183][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.037507][ T8258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1439.052835][ T8258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1439.056440][ T8258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1439.058840][ T8258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1439.059480][ T8258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1439.547017][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.572613][ T8258] Bluetooth: hci3: command tx timeout [ 1439.652137][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.693934][ T1114] bond0 (unregistering): Released all slaves [ 1441.063659][T14598] loop1: detected capacity change from 0 to 1024 [ 1441.179339][ T8258] Bluetooth: hci5: command tx timeout [ 1442.990639][ T8258] Bluetooth: hci3: command tx timeout [ 1443.255083][ T8258] Bluetooth: hci5: command tx timeout [ 1443.302054][T14558] rxe_eth0 speed is unknown, defaulting to 1000 [ 1445.014138][ T8258] Bluetooth: hci3: command tx timeout [ 1445.336714][ T8258] Bluetooth: hci5: command tx timeout [ 1446.279726][ T1114] hsr_slave_0: left promiscuous mode [ 1446.308382][ T1114] hsr_slave_1: left promiscuous mode [ 1446.328559][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.355498][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.391393][T14627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1447.449100][ T8258] Bluetooth: hci5: command tx timeout [ 1447.513016][T14643] loop8: detected capacity change from 0 to 1024 [ 1449.493698][ T30] audit: type=1326 audit(1794221642.828:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14645 comm="syz.5.916" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4907b9fb19 code=0x0 [ 1449.916400][T14653] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 1450.704979][T14655] loop5: detected capacity change from 0 to 8 [ 1451.411312][ T30] audit: type=1800 audit(1794221644.698:7115): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.917" name="file0" dev="overlay" ino=259 res=0 errno=-22 [ 1454.116312][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 1454.248975][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 1460.239557][T14677] jffs2: notice: (14677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1462.700464][T14585] rxe_eth0 speed is unknown, defaulting to 1000 [ 1463.239475][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1463.243423][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1463.253316][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1463.266663][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1463.267324][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1464.735526][ T1114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.212205][ T1114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.332890][ T8258] Bluetooth: hci6: command tx timeout [ 1466.794739][ T1114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.911832][T14696] rxe_eth0 speed is unknown, defaulting to 1000 [ 1467.072115][ T1114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.196723][T14741] jffs2: notice: (14741) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1467.422547][ T8258] Bluetooth: hci6: command tx timeout [ 1468.175704][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.175817][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.175951][T14558] bridge_slave_0: entered allmulticast mode [ 1468.178073][T14558] bridge_slave_0: entered promiscuous mode [ 1468.209262][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.209433][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.209561][T14558] bridge_slave_1: entered allmulticast mode [ 1468.211604][T14558] bridge_slave_1: entered promiscuous mode [ 1468.439900][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.838937][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.494825][ T8258] Bluetooth: hci6: command tx timeout [ 1469.771039][T14765] loop5: detected capacity change from 0 to 1024 [ 1469.822710][T14558] team0: Port device team_slave_0 added [ 1469.825604][T14558] team0: Port device team_slave_1 added [ 1470.126526][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.126547][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.126579][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.309506][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.309529][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.309562][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.814699][ T8258] Bluetooth: hci6: command tx timeout [ 1473.796334][ T1114] bridge_slave_1: left allmulticast mode [ 1473.796366][ T1114] bridge_slave_1: left promiscuous mode [ 1473.796579][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.806776][ T1114] bridge_slave_0: left allmulticast mode [ 1473.806801][ T1114] bridge_slave_0: left promiscuous mode [ 1473.807013][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.702614][ T1114] bridge_slave_1: left allmulticast mode [ 1474.702709][ T1114] bridge_slave_1: left promiscuous mode [ 1474.703945][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.164297][ T1114] bridge_slave_0: left allmulticast mode [ 1477.164325][ T1114] bridge_slave_0: left promiscuous mode [ 1477.164495][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.184283][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.206602][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.224714][ T1114] bond0 (unregistering): Released all slaves [ 1481.430299][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.448061][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.468786][ T1114] bond0 (unregistering): Released all slaves [ 1481.546836][T14558] hsr_slave_0: entered promiscuous mode [ 1481.549683][T14558] hsr_slave_1: entered promiscuous mode [ 1481.551563][T14558] debugfs: 'hsr0' already exists in 'hsr' [ 1481.551583][T14558] Cannot create hsr debugfs directory [ 1483.974705][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.974777][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.904549][T14585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.904668][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.904834][T14585] bridge_slave_0: entered allmulticast mode [ 1485.948270][T14585] bridge_slave_0: entered promiscuous mode [ 1485.966859][T14585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.966977][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.967120][T14585] bridge_slave_1: entered allmulticast mode [ 1485.978375][T14585] bridge_slave_1: entered promiscuous mode [ 1486.291938][T14850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1486.350356][T14585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.409746][T14585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.444486][T14854] jffs2: notice: (14854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1488.943530][T14585] team0: Port device team_slave_0 added [ 1489.731831][T14585] team0: Port device team_slave_1 added [ 1492.372007][ T1114] hsr_slave_0: left promiscuous mode [ 1492.378400][ T1114] hsr_slave_1: left promiscuous mode [ 1492.538254][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.538278][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.539542][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.539563][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.583360][ T1114] hsr_slave_0: left promiscuous mode [ 1492.591530][ T1114] hsr_slave_1: left promiscuous mode [ 1492.594832][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.603062][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.624654][ T1114] veth1_macvtap: left promiscuous mode [ 1492.624690][ T1114] veth0_macvtap: left promiscuous mode [ 1492.624770][ T1114] veth1_vlan: left promiscuous mode [ 1492.624824][ T1114] veth0_vlan: left promiscuous mode [ 1492.965062][T14895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.720503][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1494.722133][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1494.736971][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1494.738111][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1494.738774][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1494.892014][T14914] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1494.903809][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 1494.995822][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 1496.495762][T14920] jffs2: notice: (14920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1496.772934][ T8258] Bluetooth: hci4: command tx timeout [ 1496.794951][T14912] loop8: detected capacity change from 0 to 32768 [ 1496.800024][T14912] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.954 (14912) [ 1496.809206][T14912] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1496.809238][T14912] BTRFS info (device loop8): using blake2b checksum algorithm [ 1496.887924][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 1496.903223][T14912] BTRFS info (device loop8): enabling ssd optimizations [ 1496.903251][T14912] BTRFS info (device loop8): enabling free space tree [ 1496.930356][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 1496.967672][ T30] audit: type=1800 audit(1794221690.298:7116): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.954" name="bus" dev="loop8" ino=263 res=0 errno=-22 [ 1496.985773][T14934] jffs2: notice: (14934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1497.251722][T13104] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1498.853007][ T8258] Bluetooth: hci4: command tx timeout [ 1500.472018][T14585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.472036][T14585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.472060][T14585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.663299][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1500.794739][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1500.795741][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1500.802183][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1500.811159][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1501.022714][ T8258] Bluetooth: hci4: command tx timeout [ 1503.095203][ T5642] Bluetooth: hci7: command tx timeout [ 1503.095770][ T8258] Bluetooth: hci4: command tx timeout [ 1505.172518][ T5642] Bluetooth: hci7: command tx timeout [ 1506.485446][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.485585][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.485723][T14696] bridge_slave_0: entered allmulticast mode [ 1506.493453][T14696] bridge_slave_0: entered promiscuous mode [ 1506.533799][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.533913][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.534057][T14696] bridge_slave_1: entered allmulticast mode [ 1506.562877][T14696] bridge_slave_1: entered promiscuous mode [ 1506.848267][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.886780][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.234491][T14696] team0: Port device team_slave_0 added [ 1507.252410][ T5642] Bluetooth: hci7: command tx timeout [ 1507.260283][T14696] team0: Port device team_slave_1 added [ 1507.287840][T14994] process 'syz.1.966' launched '/dev/fd/6' with NULL argv: empty string added [ 1507.649115][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.649140][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.649172][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.713603][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.713625][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.713658][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.091354][T14696] hsr_slave_0: entered promiscuous mode [ 1508.098190][T14696] hsr_slave_1: entered promiscuous mode [ 1508.100572][T14696] debugfs: 'hsr0' already exists in 'hsr' [ 1508.100590][T14696] Cannot create hsr debugfs directory [ 1508.107357][T14907] rxe_eth0 speed is unknown, defaulting to 1000 [ 1508.286426][ T1114] bridge_slave_1: left allmulticast mode [ 1508.286458][ T1114] bridge_slave_1: left promiscuous mode [ 1508.286700][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.324864][ T1114] bridge_slave_0: left allmulticast mode [ 1508.324898][ T1114] bridge_slave_0: left promiscuous mode [ 1508.325136][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.337038][ T5642] Bluetooth: hci7: command tx timeout [ 1509.599610][T15027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1509.766753][T15030] jffs2: notice: (15030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1509.795768][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.803656][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.826655][ T1114] bond0 (unregistering): Released all slaves [ 1510.082262][T15024] loop8: detected capacity change from 0 to 32768 [ 1510.092230][T15024] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.969 (15024) [ 1511.551980][T14956] rxe_eth0 speed is unknown, defaulting to 1000 [ 1511.590407][T15024] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1511.590447][T15024] BTRFS info (device loop8): using blake2b checksum algorithm [ 1511.813272][T15024] BTRFS info (device loop8): enabling ssd optimizations [ 1511.813305][T15024] BTRFS info (device loop8): enabling free space tree [ 1511.887240][ T30] audit: type=1800 audit(1794221705.218:7117): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.969" name="bus" dev="loop8" ino=263 res=0 errno=-22 [ 1513.726626][T15059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1514.080246][T13104] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1514.446347][T14696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.389355][T14696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.628139][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.760506][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 1517.849534][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 1520.831819][T15108] overlayfs: failed to resolve './file0': -2 [ 1521.155052][T14696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.356699][ T8258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1521.361115][ T8258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1521.378815][ T8258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1521.387929][ T8258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1521.388850][ T8258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1521.447248][T15114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1521.472145][T15116] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1521.472293][T15116] block device autoloading is deprecated and will be removed. [ 1523.763170][ T8258] Bluetooth: hci3: command tx timeout [ 1525.738940][T14696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.812466][ T8258] Bluetooth: hci3: command tx timeout [ 1526.121183][T14907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.121304][T14907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.121482][T14907] bridge_slave_0: entered allmulticast mode [ 1526.154022][T14907] bridge_slave_0: entered promiscuous mode [ 1526.184238][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.184360][T14907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.205973][T14907] bridge_slave_1: entered allmulticast mode [ 1526.216172][T14907] bridge_slave_1: entered promiscuous mode [ 1526.541239][T14907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.558066][T14907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.892472][ T8258] Bluetooth: hci3: command tx timeout [ 1528.106403][T14907] team0: Port device team_slave_0 added [ 1528.346747][T14907] team0: Port device team_slave_1 added [ 1528.751381][T14907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.751405][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.751439][T14907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.858148][T14907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.858170][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.858203][T14907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.392383][T14907] hsr_slave_0: entered promiscuous mode [ 1529.397381][T14907] hsr_slave_1: entered promiscuous mode [ 1529.398166][T14907] debugfs: 'hsr0' already exists in 'hsr' [ 1529.398188][T14907] Cannot create hsr debugfs directory [ 1529.399431][T14956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.399940][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.400083][T14956] bridge_slave_0: entered allmulticast mode [ 1529.407336][T14956] bridge_slave_0: entered promiscuous mode [ 1529.461015][T14956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.461142][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.461285][T14956] bridge_slave_1: entered allmulticast mode [ 1529.470337][T14956] bridge_slave_1: entered promiscuous mode [ 1529.503698][T15172] 0x000000000003-0x000000010001 : "" [ 1529.611442][T15172] ftl_cs: FTL header corrupt! [ 1529.982466][ T8258] Bluetooth: hci3: command tx timeout [ 1530.855147][T14956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.901728][T15119] rxe_eth0 speed is unknown, defaulting to 1000 [ 1531.086350][T14956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.308603][T14956] team0: Port device team_slave_0 added [ 1531.412073][T14956] team0: Port device team_slave_1 added [ 1531.905655][T15187] loop5: detected capacity change from 0 to 32768 [ 1531.925949][T14956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.925968][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1531.926008][T14956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1531.928212][T15187] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.986 (15187) [ 1531.984956][T15187] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1531.985002][T15187] BTRFS info (device loop5): using blake2b checksum algorithm [ 1532.049248][T14956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.049271][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.049298][T14956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.137238][T15187] BTRFS info (device loop5): enabling ssd optimizations [ 1532.137269][T15187] BTRFS info (device loop5): enabling free space tree [ 1532.190770][ T30] audit: type=1800 audit(1794221725.518:7118): pid=15187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.986" name="bus" dev="loop5" ino=263 res=0 errno=-22 [ 1532.331505][T13060] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1533.326492][ T1114] bridge_slave_1: left allmulticast mode [ 1533.326546][ T1114] bridge_slave_1: left promiscuous mode [ 1533.326730][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.431984][ T1114] bridge_slave_0: left allmulticast mode [ 1533.432021][ T1114] bridge_slave_0: left promiscuous mode [ 1533.432273][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.957558][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.987108][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.010377][ T1114] bond0 (unregistering): Released all slaves [ 1534.545028][T14956] hsr_slave_0: entered promiscuous mode [ 1534.552956][T14956] hsr_slave_1: entered promiscuous mode [ 1534.572560][T14956] debugfs: 'hsr0' already exists in 'hsr' [ 1534.572580][T14956] Cannot create hsr debugfs directory [ 1536.556815][ T1114] hsr_slave_0: left promiscuous mode [ 1536.573188][ T1114] hsr_slave_1: left promiscuous mode [ 1536.574124][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.578261][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.396733][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 1538.457385][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 1545.021109][ T1114] bridge_slave_1: left allmulticast mode [ 1545.021135][ T1114] bridge_slave_1: left promiscuous mode [ 1545.021310][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.058321][ T1114] bridge_slave_0: left allmulticast mode [ 1545.058343][ T1114] bridge_slave_0: left promiscuous mode [ 1545.058515][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.416540][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.416590][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.500200][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.523522][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.539657][ T1114] bond0 (unregistering): Released all slaves [ 1548.035656][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.035772][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.035917][T15119] bridge_slave_0: entered allmulticast mode [ 1548.059522][T15119] bridge_slave_0: entered promiscuous mode [ 1548.070907][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.079195][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.079338][T15119] bridge_slave_1: entered allmulticast mode [ 1548.138379][T15119] bridge_slave_1: entered promiscuous mode [ 1549.402038][ T1114] hsr_slave_0: left promiscuous mode [ 1549.423829][ T1114] hsr_slave_1: left promiscuous mode [ 1549.426566][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.430713][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.898205][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 1552.005808][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 1552.508205][T15119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.624592][T15119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.779536][T14907] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1552.823896][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1552.829374][T14907] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1552.861852][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1552.918104][T15119] team0: Port device team_slave_0 added [ 1552.918684][T14907] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1552.992198][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1552.993349][T14907] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1553.073315][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1553.113301][T15119] team0: Port device team_slave_1 added [ 1553.474035][T15119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.474058][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.474090][T15119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.526341][T15119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.526361][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.526394][T15119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.909080][T15119] hsr_slave_0: entered promiscuous mode [ 1553.920533][T15119] hsr_slave_1: entered promiscuous mode [ 1553.929768][T15119] debugfs: 'hsr0' already exists in 'hsr' [ 1553.929790][T15119] Cannot create hsr debugfs directory [ 1554.033884][T14956] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1554.052682][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1554.053763][T14956] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1554.057279][T15332] jffs2: notice: (15332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1554.111247][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1554.149144][T14956] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1554.180906][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1554.213266][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1554.217133][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1554.218727][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1554.220293][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1554.220998][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1554.329698][T14956] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1554.395570][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1555.475323][T15360] jffs2: notice: (15360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1556.928937][ T8258] Bluetooth: hci5: command tx timeout [ 1559.012869][ T8258] Bluetooth: hci5: command tx timeout [ 1559.131764][T15119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1559.162958][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1559.171839][T15119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1559.226222][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1559.227277][T15119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1559.291850][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1559.299047][T15119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1559.390012][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1560.082085][T15334] rxe_eth0 speed is unknown, defaulting to 1000 [ 1560.206320][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1560.221280][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1560.231129][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1560.247088][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1560.250241][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1560.840540][ T1005] bridge_slave_1: left allmulticast mode [ 1560.840567][ T1005] bridge_slave_1: left promiscuous mode [ 1560.840751][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.886713][ T1005] bridge_slave_0: left allmulticast mode [ 1560.886746][ T1005] bridge_slave_0: left promiscuous mode [ 1560.887004][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.092990][ T5642] Bluetooth: hci5: command tx timeout [ 1562.025725][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.097939][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.123330][ T1005] bond0 (unregistering): Released all slaves [ 1562.312455][ T5642] Bluetooth: hci4: command tx timeout [ 1562.404039][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1563.388161][ T5642] Bluetooth: hci5: command tx timeout [ 1564.388178][ T5642] Bluetooth: hci4: command tx timeout [ 1566.487731][ T5642] Bluetooth: hci4: command tx timeout [ 1568.543920][ T8258] Bluetooth: hci4: command tx timeout [ 1569.157390][ T1005] hsr_slave_0: left promiscuous mode [ 1569.161902][ T1005] hsr_slave_1: left promiscuous mode [ 1569.165680][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.197567][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.969849][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 1570.032028][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 1570.547536][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1570.572436][T15396] rxe_eth0 speed is unknown, defaulting to 1000 [ 1570.619477][T15119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.761317][T15119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.849044][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.849156][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.900189][T13861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.900324][T13861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.034929][T15334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.039492][T15334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.039635][T15334] bridge_slave_0: entered allmulticast mode [ 1573.054487][T15334] bridge_slave_0: entered promiscuous mode [ 1573.128111][T15334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.128265][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.128401][T15334] bridge_slave_1: entered allmulticast mode [ 1573.136009][T15334] bridge_slave_1: entered promiscuous mode [ 1573.580972][T15334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.619280][T15334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.059562][T15334] team0: Port device team_slave_0 added [ 1575.070740][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1575.087132][T15334] team0: Port device team_slave_1 added [ 1575.297207][T15489] jffs2: notice: (15489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1576.013245][T15334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.013308][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.013354][T15334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.049978][T15334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.049998][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.050037][T15334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.610115][T15334] hsr_slave_0: entered promiscuous mode [ 1578.614230][T15334] hsr_slave_1: entered promiscuous mode [ 1578.617021][T15334] debugfs: 'hsr0' already exists in 'hsr' [ 1578.617046][T15334] Cannot create hsr debugfs directory [ 1578.699257][ T1005] bridge_slave_1: left allmulticast mode [ 1578.699289][ T1005] bridge_slave_1: left promiscuous mode [ 1578.699526][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.765523][ T1005] bridge_slave_0: left allmulticast mode [ 1578.765556][ T1005] bridge_slave_0: left promiscuous mode [ 1578.765792][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.234796][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.833114][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.827973][ T1005] bond0 (unregistering): Released all slaves [ 1584.531261][T15537] jffs2: notice: (15537) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1585.374777][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1585.487576][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1585.504262][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1585.507466][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1585.508474][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1585.509317][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1586.661780][ T1005] hsr_slave_0: left promiscuous mode [ 1586.677635][ T1005] hsr_slave_1: left promiscuous mode [ 1586.678718][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.689668][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.584248][ T5642] Bluetooth: hci6: command tx timeout [ 1588.484456][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 1588.558136][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 1589.172598][T15581] jffs2: notice: (15581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1589.662673][ T5642] Bluetooth: hci6: command tx timeout [ 1590.279688][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1590.857981][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.858151][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.858274][T15396] bridge_slave_0: entered allmulticast mode [ 1590.866807][T15396] bridge_slave_0: entered promiscuous mode [ 1591.847504][ T5642] Bluetooth: hci6: command tx timeout [ 1591.972146][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.972234][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.973406][T15396] bridge_slave_1: entered allmulticast mode [ 1592.000198][T15396] bridge_slave_1: entered promiscuous mode [ 1592.473045][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.517687][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.118302][T15396] team0: Port device team_slave_0 added [ 1593.142073][T15396] team0: Port device team_slave_1 added [ 1593.893296][ T5642] Bluetooth: hci6: command tx timeout [ 1595.287769][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.287791][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.287820][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.347185][T15542] rxe_eth0 speed is unknown, defaulting to 1000 [ 1595.355010][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.355036][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.355068][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.558009][T15396] hsr_slave_0: entered promiscuous mode [ 1597.561709][T15396] hsr_slave_1: entered promiscuous mode [ 1597.574152][T15396] debugfs: 'hsr0' already exists in 'hsr' [ 1597.574172][T15396] Cannot create hsr debugfs directory [ 1597.584151][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1599.247826][T15334] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1600.917612][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1601.145086][T15334] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1601.183304][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1601.207861][T10353] bridge_slave_1: left allmulticast mode [ 1601.207896][T10353] bridge_slave_1: left promiscuous mode [ 1601.208144][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.241569][T10353] bridge_slave_0: left allmulticast mode [ 1601.241597][T10353] bridge_slave_0: left promiscuous mode [ 1601.241808][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.324568][T10353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.348986][T10353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.369007][T10353] bond0 (unregistering): Released all slaves [ 1603.612763][T15334] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1603.643389][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1603.647994][T15334] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1603.694985][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1603.716327][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1604.962160][T15667] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1605.177870][ T30] audit: type=1800 audit(1794221798.508:7119): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1038" name="file0" dev="overlay" ino=451 res=0 errno=-22 [ 1605.325929][T15667] md: md8 stopped. [ 1606.307308][T10353] hsr_slave_0: left promiscuous mode [ 1606.324971][T10353] hsr_slave_1: left promiscuous mode [ 1606.325732][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.357189][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.887568][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.887633][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.888218][T10353] team0 (unregistering): Port device team_slave_1 removed [ 1609.989290][T10353] team0 (unregistering): Port device team_slave_0 removed [ 1614.010064][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1614.264337][T15542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.264454][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.264593][T15542] bridge_slave_0: entered allmulticast mode [ 1614.266847][T15542] bridge_slave_0: entered promiscuous mode [ 1614.574116][T15542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.574233][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.574394][T15542] bridge_slave_1: entered allmulticast mode [ 1614.607661][T15542] bridge_slave_1: entered promiscuous mode [ 1615.919677][T15542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.945320][T15542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.255718][ T8258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1616.277312][ T8258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1616.281806][ T8258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1616.289802][ T8258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1616.290809][ T8258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1616.377731][T15542] team0: Port device team_slave_0 added [ 1616.401318][T15542] team0: Port device team_slave_1 added [ 1616.488868][T15542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.488891][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.488922][T15542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.546606][T15542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.546625][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.546650][T15542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.885350][ T30] audit: type=1800 audit(1794221810.218:7120): pid=15720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1049" name="file0" dev="overlay" ino=473 res=0 errno=-22 [ 1618.372972][ T5642] Bluetooth: hci3: command tx timeout [ 1618.510488][T15542] hsr_slave_0: entered promiscuous mode [ 1618.516584][T15542] hsr_slave_1: entered promiscuous mode [ 1618.522178][T15542] debugfs: 'hsr0' already exists in 'hsr' [ 1618.522198][T15542] Cannot create hsr debugfs directory [ 1618.820068][T15396] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1618.852183][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1618.857676][T15396] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1618.889001][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1619.030237][T15731] jffs2: notice: (15731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1619.068440][T15396] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1619.089535][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1619.090614][T15396] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1619.137097][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1620.139271][T15396] kthread_run failed with err -4 [ 1620.454732][ T8258] Bluetooth: hci3: command tx timeout [ 1622.206312][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1622.804903][ T8258] Bluetooth: hci3: command tx timeout [ 1622.821223][T13737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1622.834101][T13737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1622.846533][T13737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1622.858729][T13737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1622.864026][T13737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1624.853963][ T8258] Bluetooth: hci3: command tx timeout [ 1624.934546][ T8258] Bluetooth: hci5: command tx timeout [ 1625.021873][T15713] rxe_eth0 speed is unknown, defaulting to 1000 [ 1627.022523][ T8258] Bluetooth: hci5: command tx timeout [ 1628.505064][ T3339] bridge_slave_1: left allmulticast mode [ 1628.505098][ T3339] bridge_slave_1: left promiscuous mode [ 1628.505337][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.598864][ T3339] bridge_slave_0: left allmulticast mode [ 1628.598889][ T3339] bridge_slave_0: left promiscuous mode [ 1628.599096][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.092393][ T8258] Bluetooth: hci5: command tx timeout [ 1629.716287][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.877525][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.088613][ T3339] bond0 (unregistering): Released all slaves [ 1631.432520][ T8258] Bluetooth: hci5: command tx timeout [ 1631.805050][T15754] rxe_eth0 speed is unknown, defaulting to 1000 [ 1632.111780][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1632.615558][ T30] audit: type=1800 audit(1794221825.948:7121): pid=15820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1061" name="file0" dev="overlay" ino=521 res=0 errno=-22 [ 1636.378610][ T3339] hsr_slave_0: left promiscuous mode [ 1636.399810][ T3339] hsr_slave_1: left promiscuous mode [ 1636.400767][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.420123][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.124083][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1639.208862][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1642.287043][T15542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1642.341411][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1642.354141][T15542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1642.471224][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1642.602400][T15542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1642.659448][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1643.115059][T15542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1643.152830][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1643.344517][ T30] audit: type=1800 audit(1794221836.678:7122): pid=15846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1064" name="file0" dev="overlay" ino=518 res=0 errno=-22 [ 1644.461844][T15542] kthread_run failed with err -4 [ 1644.766142][T15713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.767843][T15713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.767997][T15713] bridge_slave_0: entered allmulticast mode [ 1644.814637][T15713] bridge_slave_0: entered promiscuous mode [ 1644.831793][T15713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.831903][T15713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.832047][T15713] bridge_slave_1: entered allmulticast mode [ 1644.875759][T15713] bridge_slave_1: entered promiscuous mode [ 1644.915797][T13737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1644.922666][T13737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1644.924083][T13737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1644.932998][T13737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1644.933731][T13737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1645.015384][T15853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1646.742925][T15853] md: array md1 already initialised! [ 1646.852433][T15853] md: md1 stopped. [ 1647.012527][T13737] Bluetooth: hci4: command tx timeout [ 1647.438597][T15713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.452458][T15713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.445410][T15713] team0: Port device team_slave_0 added [ 1649.070267][T15713] team0: Port device team_slave_1 added [ 1649.092389][T13737] Bluetooth: hci4: command tx timeout [ 1651.182395][T13737] Bluetooth: hci4: command tx timeout [ 1651.828725][T15713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.828749][T15713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.830318][T15713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.805743][T13737] Bluetooth: hci4: command tx timeout [ 1653.921433][T15713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.921456][T15713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.921489][T15713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.321959][T15754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.322142][T15754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.322494][T15754] bridge_slave_0: entered allmulticast mode [ 1654.326192][T15754] bridge_slave_0: entered promiscuous mode [ 1654.391624][T15713] hsr_slave_0: entered promiscuous mode [ 1654.402238][T15713] hsr_slave_1: entered promiscuous mode [ 1654.411046][T15713] debugfs: 'hsr0' already exists in 'hsr' [ 1654.411061][T15713] Cannot create hsr debugfs directory [ 1654.421082][T15754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.421198][T15754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.421351][T15754] bridge_slave_1: entered allmulticast mode [ 1654.432493][T15754] bridge_slave_1: entered promiscuous mode [ 1654.834690][T15754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.020728][T15754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.528998][T15754] team0: Port device team_slave_0 added [ 1655.752881][T15754] team0: Port device team_slave_1 added [ 1655.916342][T15851] rxe_eth0 speed is unknown, defaulting to 1000 [ 1656.243169][T15754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.243187][T15754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.243210][T15754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.345893][T15754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.345914][T15754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.345944][T15754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.485991][ T3339] bridge_slave_1: left allmulticast mode [ 1656.486024][ T3339] bridge_slave_1: left promiscuous mode [ 1656.486274][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.540773][ T3339] bridge_slave_0: left allmulticast mode [ 1656.540804][ T3339] bridge_slave_0: left promiscuous mode [ 1656.555372][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.040313][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.079924][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.109920][T15890] loop8: detected capacity change from 0 to 32768 [ 1657.110051][ T3339] bond0 (unregistering): Released all slaves [ 1657.127530][T15890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1070 (15890) [ 1657.188634][T15890] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1657.188674][T15890] BTRFS info (device loop8): using sha256 checksum algorithm [ 1657.316210][T15890] BTRFS info (device loop8): enabling ssd optimizations [ 1657.316234][T15890] BTRFS info (device loop8): turning on async discard [ 1657.316249][T15890] BTRFS info (device loop8): enabling free space tree [ 1657.668469][T15890] FAULT_INJECTION: forcing a failure. [ 1657.668469][T15890] name failslab, interval 1, probability 5, space 0, times 100 [ 1657.668509][T15890] CPU: 1 UID: 0 PID: 15890 Comm: syz.8.1070 Not tainted syzkaller #0 PREEMPT(full) [ 1657.668540][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1657.668556][T15890] Call Trace: [ 1657.668568][T15890] [ 1657.668580][T15890] dump_stack_lvl+0xe8/0x150 [ 1657.668632][T15890] should_fail_ex+0x3eb/0x540 [ 1657.668675][T15890] should_failslab+0xa8/0x100 [ 1657.668703][T15890] ? vm_area_alloc+0x24/0x140 [ 1657.668735][T15890] kmem_cache_alloc_noprof+0x9c/0x600 [ 1657.668773][T15890] ? vma_merge_new_range+0x556/0x810 [ 1657.668811][T15890] ? vm_area_alloc+0x24/0x140 [ 1657.668849][T15890] vm_area_alloc+0x24/0x140 [ 1657.668881][T15890] mmap_region+0x18c5/0x2800 [ 1657.668919][T15890] ? __lock_acquire+0x747/0x2de0 [ 1657.668963][T15890] ? __lock_acquire+0x747/0x2de0 [ 1657.669002][T15890] ? __pfx_mmap_region+0x10/0x10 [ 1657.669030][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669063][T15890] ? lock_acquire+0x115/0x350 [ 1657.669164][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669197][T15890] ? mas_ascend+0x2f9/0x8b0 [ 1657.669246][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669287][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669319][T15890] ? mas_prev_node+0xbfd/0xe80 [ 1657.669355][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669393][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669425][T15890] ? mas_prev_slot+0xb76/0xbf0 [ 1657.669533][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669565][T15890] ? vm_unmapped_area+0xde/0x230 [ 1657.669612][T15890] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1657.669673][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669705][T15890] ? thp_get_unmapped_area_vmaflags+0x25b/0x2d0 [ 1657.669748][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669780][T15890] ? cap_mmap_addr+0xaa/0xf0 [ 1657.669819][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669850][T15890] ? security_mmap_addr+0x71/0x240 [ 1657.669888][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.669930][T15890] do_mmap+0xe0a/0x1300 [ 1657.669956][T15890] ? kasan_save_track+0x3e/0x80 [ 1657.669994][T15890] ? kasan_save_free_info+0x40/0x50 [ 1657.670037][T15890] ? __pfx_do_mmap+0x10/0x10 [ 1657.670060][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.670105][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.670147][T15890] ? vm_mmap_pgoff+0x1ed/0x520 [ 1657.670181][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.670212][T15890] ? down_write_killable+0x179/0x230 [ 1657.670259][T15890] ? __pfx_down_write_killable+0x10/0x10 [ 1657.670300][T15890] ? apparmor_mmap_file+0x1cc/0x390 [ 1657.670336][T15890] ? security_mmap_file+0xf9/0xa20 [ 1657.670379][T15890] vm_mmap_pgoff+0x27a/0x520 [ 1657.670425][T15890] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1657.670464][T15890] ? kfree+0x1c5/0x650 [ 1657.670494][T15890] ? __se_sys_memfd_create+0x2e6/0x410 [ 1657.670531][T15890] ? ksys_mmap_pgoff+0xf3/0x760 [ 1657.670559][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.670591][T15890] ? __x64_sys_mmap+0x7f/0x140 [ 1657.670629][T15890] do_syscall_64+0x16a/0x530 [ 1657.670665][T15890] ? trace_irq_disable+0x3b/0x140 [ 1657.670706][T15890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.670741][T15890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.670769][T15890] RIP: 0033:0x7fe5a8f9f882 [ 1657.670794][T15890] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1657.670817][T15890] RSP: 002b:00007fe5a9f2bdf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1657.670846][T15890] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe5a8f9f882 [ 1657.670866][T15890] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1657.670883][T15890] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1657.670900][T15890] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000009 [ 1657.670917][T15890] R13: 00007fe5a9f2bee0 R14: 00007fe5a9f2bea0 R15: 0000200000006ac0 [ 1657.670961][T15890] [ 1657.801484][T15890] FAULT_INJECTION: forcing a failure. [ 1657.801484][T15890] name failslab, interval 1, probability 5, space 0, times 99 [ 1657.801519][T15890] CPU: 1 UID: 0 PID: 15890 Comm: syz.8.1070 Not tainted syzkaller #0 PREEMPT(full) [ 1657.801547][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1657.801564][T15890] Call Trace: [ 1657.801574][T15890] [ 1657.801585][T15890] dump_stack_lvl+0xe8/0x150 [ 1657.801634][T15890] should_fail_ex+0x3eb/0x540 [ 1657.801674][T15890] should_failslab+0xa8/0x100 [ 1657.801704][T15890] __kmalloc_cache_noprof+0x9e/0x600 [ 1657.801745][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.801777][T15890] ? shrinker_alloc+0x59/0xb90 [ 1657.801806][T15890] ? shrinker_alloc+0x59/0xb90 [ 1657.801844][T15890] shrinker_alloc+0x59/0xb90 [ 1657.801874][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.801905][T15890] ? __raw_spin_lock_init+0x45/0x100 [ 1657.801939][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.801969][T15890] ? __raw_spin_lock_init+0x45/0x100 [ 1657.802005][T15890] sget_fc+0xe7e/0x1ce0 [ 1657.802040][T15890] ? __pfx_super_s_dev_test+0x10/0x10 [ 1657.802093][T15890] ? __pfx_super_s_dev_set+0x10/0x10 [ 1657.802134][T15890] ? __pfx_sget_fc+0x10/0x10 [ 1657.802172][T15890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1657.802224][T15890] sget_dev+0xab/0xf0 [ 1657.802260][T15890] ? __pfx_sget_dev+0x10/0x10 [ 1657.802295][T15890] ? get_mtd_device+0x200/0x240 [ 1657.802332][T15890] ? __pfx_get_mtd_device+0x10/0x10 [ 1657.802370][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.802406][T15890] mtd_get_sb+0x51/0x420 [ 1657.802432][T15890] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1657.802473][T15890] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1657.802514][T15890] get_tree_mtd+0x597/0x7d0 [ 1657.802544][T15890] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1657.802582][T15890] ? __pfx_get_tree_mtd+0x10/0x10 [ 1657.802613][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.802648][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.802685][T15890] vfs_get_tree+0x92/0x2a0 [ 1657.802728][T15890] do_new_mount+0x325/0xb00 [ 1657.802762][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.802800][T15890] ? __pfx_do_new_mount+0x10/0x10 [ 1657.802835][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.802865][T15890] ? ns_capable+0x84/0xe0 [ 1657.802905][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.802936][T15890] ? path_mount+0x647/0x1050 [ 1657.802972][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.803002][T15890] ? user_path_at+0xd4/0x160 [ 1657.803043][T15890] __se_sys_mount+0x31d/0x420 [ 1657.803089][T15890] ? __pfx___se_sys_mount+0x10/0x10 [ 1657.803130][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.803161][T15890] ? __x64_sys_mount+0x20/0xc0 [ 1657.803198][T15890] do_syscall_64+0x16a/0x530 [ 1657.803233][T15890] ? trace_irq_disable+0x3b/0x140 [ 1657.803271][T15890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.803305][T15890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.803336][T15890] RIP: 0033:0x7fe5a8f9fb19 [ 1657.803360][T15890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.803383][T15890] RSP: 002b:00007fe5a9f2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1657.803410][T15890] RAX: ffffffffffffffda RBX: 00007fe5a9225fa0 RCX: 00007fe5a8f9fb19 [ 1657.803431][T15890] RDX: 00002000000077c0 RSI: 0000200000007780 RDI: 0000200000007740 [ 1657.803450][T15890] RBP: 00007fe5a9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1657.803466][T15890] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.803482][T15890] R13: 00007fe5a9226038 R14: 00007fe5a9225fa0 R15: 00007ffcc0ff05a8 [ 1657.803525][T15890] [ 1657.864663][T15890] FAULT_INJECTION: forcing a failure. [ 1657.864663][T15890] name failslab, interval 1, probability 5, space 0, times 98 [ 1657.864697][T15890] CPU: 1 UID: 0 PID: 15890 Comm: syz.8.1070 Not tainted syzkaller #0 PREEMPT(full) [ 1657.864725][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1657.864742][T15890] Call Trace: [ 1657.864752][T15890] [ 1657.864763][T15890] dump_stack_lvl+0xe8/0x150 [ 1657.864812][T15890] should_fail_ex+0x3eb/0x540 [ 1657.864853][T15890] should_failslab+0xa8/0x100 [ 1657.864883][T15890] __kmalloc_noprof+0xf9/0x710 [ 1657.864920][T15890] ? security_inode_init_security+0x102/0x3e0 [ 1657.864949][T15890] ? security_inode_init_security+0x102/0x3e0 [ 1657.864987][T15890] security_inode_init_security+0x102/0x3e0 [ 1657.865018][T15890] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1657.865053][T15890] ? __pfx_security_inode_init_security+0x10/0x10 [ 1657.865091][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.865126][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.865157][T15890] ? simple_acl_create+0x184/0x1b0 [ 1657.865194][T15890] shmem_mknod+0x1ea/0x340 [ 1657.865235][T15890] lookup_open+0x102d/0x1ae0 [ 1657.865313][T15890] path_openat+0x70c/0x20f0 [ 1657.865381][T15890] do_file_open+0x23e/0x4a0 [ 1657.865429][T15890] ? __pfx_do_file_open+0x10/0x10 [ 1657.865499][T15890] ? _raw_spin_unlock+0x28/0x50 [ 1657.865529][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.865562][T15890] ? alloc_fd+0x6af/0x760 [ 1657.865610][T15890] do_sys_openat2+0x115/0x200 [ 1657.865642][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.865674][T15890] ? __se_sys_futex+0x3a8/0x450 [ 1657.865704][T15890] ? __pfx_do_sys_openat2+0x10/0x10 [ 1657.865745][T15890] ? rcu_is_watching+0x16/0xb0 [ 1657.865787][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1657.865831][T15890] __x64_sys_openat+0x138/0x170 [ 1657.865871][T15890] do_syscall_64+0x16a/0x530 [ 1657.865907][T15890] ? trace_irq_disable+0x3b/0x140 [ 1657.865947][T15890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.865982][T15890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.866010][T15890] RIP: 0033:0x7fe5a8f9fb19 [ 1657.866033][T15890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.866056][T15890] RSP: 002b:00007fe5a9f2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1657.866093][T15890] RAX: ffffffffffffffda RBX: 00007fe5a9225fa0 RCX: 00007fe5a8f9fb19 [ 1657.866114][T15890] RDX: 00000000000c4042 RSI: 0000200000007940 RDI: ffffffffffffff9c [ 1657.866133][T15890] RBP: 00007fe5a9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1657.866151][T15890] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 1657.866168][T15890] R13: 00007fe5a9226038 R14: 00007fe5a9225fa0 R15: 00007ffcc0ff05a8 [ 1657.866211][T15890] [ 1659.452650][T15890] FAULT_INJECTION: forcing a failure. [ 1659.452650][T15890] name failslab, interval 1, probability 5, space 0, times 96 [ 1659.452690][T15890] CPU: 1 UID: 0 PID: 15890 Comm: syz.8.1070 Not tainted syzkaller #0 PREEMPT(full) [ 1659.452720][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1659.452736][T15890] Call Trace: [ 1659.452747][T15890] [ 1659.452759][T15890] dump_stack_lvl+0xe8/0x150 [ 1659.452808][T15890] should_fail_ex+0x3eb/0x540 [ 1659.452849][T15890] should_failslab+0xa8/0x100 [ 1659.452876][T15890] ? taskstats_exit+0x19e/0xe10 [ 1659.452912][T15890] kmem_cache_alloc_noprof+0x9c/0x600 [ 1659.452946][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.452979][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453009][T15890] ? taskstats_exit+0x19e/0xe10 [ 1659.453052][T15890] taskstats_exit+0x19e/0xe10 [ 1659.453088][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453126][T15890] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1659.453155][T15890] ? __pfx_taskstats_exit+0x10/0x10 [ 1659.453188][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453224][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453259][T15890] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.453296][T15890] do_exit+0x688/0x2360 [ 1659.453333][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453366][T15890] ? __pfx_do_exit+0x10/0x10 [ 1659.453391][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453429][T15890] ? cgroup1_freezing+0x20/0x350 [ 1659.453457][T15890] ? cgroup1_freezing+0x20/0x350 [ 1659.453489][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453530][T15890] do_group_exit+0x22d/0x2f0 [ 1659.453557][T15890] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.453600][T15890] get_signal+0x136a/0x1430 [ 1659.453664][T15890] arch_do_signal_or_restart+0xbb/0x860 [ 1659.453697][T15890] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1659.453735][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453780][T15890] exit_to_user_mode_loop+0x10e/0x770 [ 1659.453817][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453848][T15890] ? rcu_is_watching+0x16/0xb0 [ 1659.453895][T15890] do_syscall_64+0x32c/0x530 [ 1659.453930][T15890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.453957][T15890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1659.453994][T15890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.454021][T15890] RIP: 0033:0x7fe5a8f9fb19 [ 1659.454044][T15890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.454066][T15890] RSP: 002b:00007fe5a9f2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1659.454093][T15890] RAX: fffffffffffffe00 RBX: 00007fe5a9225fa8 RCX: 00007fe5a8f9fb19 [ 1659.454114][T15890] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5a9225fa8 [ 1659.454131][T15890] RBP: 00007fe5a9225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.454149][T15890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1659.454165][T15890] R13: 00007fe5a9226038 R14: 00007ffcc0ff04c0 R15: 00007ffcc0ff05a8 [ 1659.454208][T15890] [ 1659.815733][T13104] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1660.023144][T15913] jffs2: notice: (15913) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1660.224405][T15754] hsr_slave_0: entered promiscuous mode [ 1661.504240][T15754] hsr_slave_1: entered promiscuous mode [ 1661.526593][T15754] debugfs: 'hsr0' already exists in 'hsr' [ 1661.526616][T15754] Cannot create hsr debugfs directory [ 1663.682458][T15822] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1663.738148][ T3339] hsr_slave_0: left promiscuous mode [ 1663.753233][ T3339] hsr_slave_1: left promiscuous mode [ 1663.754281][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1663.832445][T15822] usb 2-1: Using ep0 maxpacket: 16 [ 1664.896108][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.769685][T15822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1666.769740][T15822] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1666.770946][T15822] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1666.770984][T15822] usb 2-1: can't read configurations, error -71 [ 1668.294446][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.294528][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.372714][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1086'. [ 1671.421730][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1671.459015][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1676.559894][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.560115][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.560252][T15851] bridge_slave_0: entered allmulticast mode [ 1676.562150][T15851] bridge_slave_0: entered promiscuous mode [ 1676.928647][T15996] loop8: detected capacity change from 0 to 512 [ 1676.999500][T15996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1676.999621][T15996] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1677.040563][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.041532][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.050149][ T30] audit: type=1800 audit(1794221870.378:7123): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1092" name="file1" dev="loop8" ino=15 res=0 errno=-22 [ 1677.050246][T15851] bridge_slave_1: entered allmulticast mode [ 1677.078093][T15851] bridge_slave_1: entered promiscuous mode [ 1679.034570][ T8258] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1679.040636][ T8258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1679.061640][ T8258] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1679.063414][ T8258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1679.065069][ T8258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1681.219297][T13737] Bluetooth: hci6: command tx timeout [ 1681.837514][T13104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1682.181229][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.396114][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.253643][ T8258] Bluetooth: hci6: command tx timeout [ 1683.898307][T15851] team0: Port device team_slave_0 added [ 1683.901513][T15851] team0: Port device team_slave_1 added [ 1684.109415][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.109437][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.109469][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.113135][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.113150][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.113180][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.516524][T13737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1684.520494][T13737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1684.532940][T13737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1684.548943][T13737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1684.550540][T13737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1684.879193][T15851] hsr_slave_0: entered promiscuous mode [ 1684.890749][T15851] hsr_slave_1: entered promiscuous mode [ 1684.891343][T15851] debugfs: 'hsr0' already exists in 'hsr' [ 1684.891357][T15851] Cannot create hsr debugfs directory [ 1685.342778][ T8258] Bluetooth: hci6: command tx timeout [ 1686.369721][T16010] rxe_eth0 speed is unknown, defaulting to 1000 [ 1686.737721][ T8258] Bluetooth: hci3: command tx timeout [ 1686.808931][T16062] jffs2: notice: (16062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1687.857425][ T8258] Bluetooth: hci6: command tx timeout [ 1688.772939][ T8258] Bluetooth: hci3: command tx timeout [ 1689.327813][ T3339] bridge_slave_1: left allmulticast mode [ 1689.327849][ T3339] bridge_slave_1: left promiscuous mode [ 1689.328112][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.408499][ T3339] bridge_slave_0: left allmulticast mode [ 1689.408527][ T3339] bridge_slave_0: left promiscuous mode [ 1689.408719][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.513871][ T30] audit: type=1800 audit(1794221883.828:7124): pid=16075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1102" name="file0" dev="overlay" ino=589 res=0 errno=-22 [ 1690.854525][ T8258] Bluetooth: hci3: command tx timeout [ 1691.387447][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.932562][ T8258] Bluetooth: hci3: command tx timeout [ 1693.802083][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.835261][ T3339] bond0 (unregistering): Released all slaves [ 1694.383979][ T30] audit: type=1800 audit(1794221887.718:7125): pid=16085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1106" name="file0" dev="overlay" ino=603 res=0 errno=-22 [ 1695.370867][T16039] rxe_eth0 speed is unknown, defaulting to 1000 [ 1697.434465][T15851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1697.470645][T15851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1697.474899][T15851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1697.514802][T15851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1697.666934][T15851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1697.707243][T15851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1697.851585][T15851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1697.881565][T15851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1697.996628][ T3339] hsr_slave_0: left promiscuous mode [ 1698.013310][ T3339] hsr_slave_1: left promiscuous mode [ 1698.014565][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.048818][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.122650][T16108] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1108'. [ 1700.519407][T16099] nvme_fabrics: missing parameter 'transport=%s' [ 1700.521103][T16099] nvme_fabrics: missing parameter 'nqn=%s' [ 1701.551716][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1701.628990][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1702.033712][ T30] audit: type=1326 audit(1794221895.368:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc739fb19 code=0x7ffc0000 [ 1702.033943][ T30] audit: type=1326 audit(1794221895.368:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefc7399897 code=0x7ffc0000 [ 1702.034444][ T30] audit: type=1326 audit(1794221895.368:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefc7340e99 code=0x7ffc0000 [ 1702.034631][ T30] audit: type=1326 audit(1794221895.368:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fefc739fb19 code=0x7ffc0000 [ 1702.034852][ T30] audit: type=1326 audit(1794221895.368:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc739fb19 code=0x7ffc0000 [ 1702.035053][ T30] audit: type=1326 audit(1794221895.368:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc739fb19 code=0x7ffc0000 [ 1702.035607][ T30] audit: type=1326 audit(1794221895.368:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fefc739fb19 code=0x7ffc0000 [ 1702.035787][ T30] audit: type=1326 audit(1794221895.368:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc739fb19 code=0x7ffc0000 [ 1702.036002][ T30] audit: type=1326 audit(1794221895.368:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc739fb19 code=0x7ffc0000 [ 1702.044764][ T30] audit: type=1326 audit(1794221895.378:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16119 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefc7399897 code=0x7ffc0000 [ 1705.119780][T16010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.121383][T16010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.121542][T16010] bridge_slave_0: entered allmulticast mode [ 1705.155065][T16010] bridge_slave_0: entered promiscuous mode [ 1705.304850][T16010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.304948][T16010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.305068][T16010] bridge_slave_1: entered allmulticast mode [ 1705.346180][T16010] bridge_slave_1: entered promiscuous mode [ 1707.547991][T16150] jffs2: notice: (16150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1707.668218][T16010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.690471][T16010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1708.911919][T13737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1708.927502][T13737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1708.928278][T13737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1708.946734][T13737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1708.960019][T13737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1709.363432][T16010] team0: Port device team_slave_0 added [ 1709.384939][T16010] team0: Port device team_slave_1 added [ 1711.426406][ T8258] Bluetooth: hci5: command tx timeout [ 1711.660265][T16175] jffs2: notice: (16175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1713.235343][T16010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.235367][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.235398][T16010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.369652][T16010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.369674][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.369712][T16010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.494071][T13737] Bluetooth: hci5: command tx timeout [ 1713.841153][T16039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.841365][T16039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.841533][T16039] bridge_slave_0: entered allmulticast mode [ 1713.874607][T16039] bridge_slave_0: entered promiscuous mode [ 1714.889886][T16039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.890024][T16039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.890173][T16039] bridge_slave_1: entered allmulticast mode [ 1714.891786][T16039] bridge_slave_1: entered promiscuous mode [ 1715.085605][T16010] hsr_slave_0: entered promiscuous mode [ 1715.113262][T16010] hsr_slave_1: entered promiscuous mode [ 1715.119336][T16010] debugfs: 'hsr0' already exists in 'hsr' [ 1715.119359][T16010] Cannot create hsr debugfs directory [ 1715.444852][T16039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.481365][T16039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.573732][T13737] Bluetooth: hci5: command tx timeout [ 1717.121979][T16039] team0: Port device team_slave_0 added [ 1717.725460][T13737] Bluetooth: hci5: command tx timeout [ 1717.833970][T16039] team0: Port device team_slave_1 added [ 1718.117601][T16161] rxe_eth0 speed is unknown, defaulting to 1000 [ 1718.478744][T16039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.478766][T16039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.478799][T16039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.539639][T16039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.539661][T16039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.539700][T16039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.814343][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1719.090045][ T3339] bridge_slave_1: left allmulticast mode [ 1719.090073][ T3339] bridge_slave_1: left promiscuous mode [ 1719.090267][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.153791][ T3339] bridge_slave_0: left allmulticast mode [ 1719.155750][ T3339] bridge_slave_0: left promiscuous mode [ 1719.156001][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.251734][ T3339] bridge_slave_1: left allmulticast mode [ 1719.251760][ T3339] bridge_slave_1: left promiscuous mode [ 1719.251926][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.313917][ T3339] bridge_slave_0: left allmulticast mode [ 1719.313950][ T3339] bridge_slave_0: left promiscuous mode [ 1719.314184][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.881646][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1719.930385][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1719.967417][ T3339] bond0 (unregistering): Released all slaves [ 1721.097718][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1721.146087][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1721.163288][ T3339] bond0 (unregistering): Released all slaves [ 1721.252076][T16226] jffs2: notice: (16226) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1721.627635][T16039] hsr_slave_0: entered promiscuous mode [ 1721.631576][T16039] hsr_slave_1: entered promiscuous mode [ 1721.663939][T16039] debugfs: 'hsr0' already exists in 'hsr' [ 1721.663963][T16039] Cannot create hsr debugfs directory [ 1723.408179][T13737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1723.414025][T13737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1723.422555][T13737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1723.438349][T13737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1723.439457][T13737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1723.662775][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1725.495173][T13737] Bluetooth: hci4: command tx timeout [ 1727.579927][T13737] Bluetooth: hci4: command tx timeout [ 1729.654393][T13737] Bluetooth: hci4: command tx timeout [ 1729.735790][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.735883][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.388748][ T3339] hsr_slave_0: left promiscuous mode [ 1730.458213][ T3339] hsr_slave_1: left promiscuous mode [ 1730.459206][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.488391][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1730.556194][ T3339] hsr_slave_0: left promiscuous mode [ 1730.562578][ T3339] hsr_slave_1: left promiscuous mode [ 1730.563550][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.584452][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.736924][T13737] Bluetooth: hci4: command tx timeout [ 1733.830260][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1733.853813][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1736.338735][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1736.371375][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1736.666808][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1736.957582][T16240] rxe_eth0 speed is unknown, defaulting to 1000 [ 1738.648224][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1738.703968][ T8258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1738.709995][ T8258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1738.710785][ T8258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1738.737991][ T8258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1738.739030][ T8258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1738.901661][T16161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.912058][T16161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.920118][T16161] bridge_slave_0: entered allmulticast mode [ 1738.934864][T16161] bridge_slave_0: entered promiscuous mode [ 1739.228724][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.228813][T16161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.228923][T16161] bridge_slave_1: entered allmulticast mode [ 1739.262451][T16161] bridge_slave_1: entered promiscuous mode [ 1739.564769][ T3339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.948266][ T30] kauditd_printk_skb: 467 callbacks suppressed [ 1739.948285][ T30] audit: type=1800 audit(1794221933.278:7603): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1132" name="file0" dev="overlay" ino=659 res=0 errno=-22 [ 1740.163019][T16161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.310568][ T3339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.355490][T16161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.493896][T16161] team0: Port device team_slave_0 added [ 1740.564173][T16344] jffs2: notice: (16344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1740.727255][T16039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1740.761141][T16039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1740.772641][T13737] Bluetooth: hci0: command tx timeout [ 1740.774034][T16161] team0: Port device team_slave_1 added [ 1741.067068][ T30] audit: type=1800 audit(1794221934.348:7604): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1131" name="file0" dev="overlay" ino=684 res=0 errno=-22 [ 1741.274664][ T3339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.852612][T13737] Bluetooth: hci0: command tx timeout [ 1742.980462][T16039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1743.000249][T16039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.111978][T16039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1743.129232][T16039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1743.207648][ T3339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.268297][T16161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.268320][T16161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.268351][T16161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.349533][T16161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1743.349555][T16161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.349586][T16161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1743.458221][T16315] rxe_eth0 speed is unknown, defaulting to 1000 [ 1743.586985][T16161] hsr_slave_0: entered promiscuous mode [ 1743.589275][T16161] hsr_slave_1: entered promiscuous mode [ 1743.590137][T16161] debugfs: 'hsr0' already exists in 'hsr' [ 1743.590156][T16161] Cannot create hsr debugfs directory [ 1744.932475][T13737] Bluetooth: hci0: command tx timeout [ 1744.971002][ T8258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1744.976965][ T8258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1745.003709][ T8258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1745.019058][ T8258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1745.019824][ T8258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1745.379766][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.379883][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.380022][T16240] bridge_slave_0: entered allmulticast mode [ 1745.409879][T16240] bridge_slave_0: entered promiscuous mode [ 1745.544612][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.544729][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.546781][T16240] bridge_slave_1: entered allmulticast mode [ 1745.560637][T16240] bridge_slave_1: entered promiscuous mode [ 1746.452480][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.619346][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.787104][T16240] team0: Port device team_slave_0 added [ 1747.010054][T16240] team0: Port device team_slave_1 added [ 1747.022919][T13737] Bluetooth: hci0: command tx timeout [ 1747.092805][ T8258] Bluetooth: hci3: command tx timeout [ 1747.119399][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.119420][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.119447][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.248101][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.248124][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.248152][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.492763][T16368] rxe_eth0 speed is unknown, defaulting to 1000 [ 1747.696135][T16240] hsr_slave_0: entered promiscuous mode [ 1747.701946][T16240] hsr_slave_1: entered promiscuous mode [ 1747.702828][T16240] debugfs: 'hsr0' already exists in 'hsr' [ 1747.702846][T16240] Cannot create hsr debugfs directory [ 1748.251344][T16411] jffs2: notice: (16411) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1749.172737][ T8258] Bluetooth: hci3: command tx timeout [ 1750.496695][T16315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.497110][T16315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.497279][T16315] bridge_slave_0: entered allmulticast mode [ 1750.499139][T16315] bridge_slave_0: entered promiscuous mode [ 1751.033077][T16315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.033214][T16315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.033328][T16315] bridge_slave_1: entered allmulticast mode [ 1751.034868][T16315] bridge_slave_1: entered promiscuous mode [ 1751.252570][ T8258] Bluetooth: hci3: command tx timeout [ 1752.501393][ T3339] bridge_slave_1: left allmulticast mode [ 1752.501421][ T3339] bridge_slave_1: left promiscuous mode [ 1752.501622][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.542085][ T3339] bridge_slave_0: left allmulticast mode [ 1752.542114][ T3339] bridge_slave_0: left promiscuous mode [ 1752.549951][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.600308][ T3339] bridge_slave_1: left allmulticast mode [ 1752.600335][ T3339] bridge_slave_1: left promiscuous mode [ 1752.600522][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.613263][ T3339] bridge_slave_0: left allmulticast mode [ 1752.613295][ T3339] bridge_slave_0: left promiscuous mode [ 1752.613498][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.452429][ T8258] Bluetooth: hci3: command tx timeout [ 1754.068180][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.099342][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1754.100738][ T3339] bond0 (unregistering): Released all slaves [ 1754.403318][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.405617][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1754.431905][ T3339] bond0 (unregistering): Released all slaves [ 1754.505151][T16433] jffs2: notice: (16433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1754.704105][T16315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.970786][T16315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1755.154463][T16439] FAULT_INJECTION: forcing a failure. [ 1755.154463][T16439] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1755.154493][T16439] CPU: 0 UID: 0 PID: 16439 Comm: syz.8.1147 Not tainted syzkaller #0 PREEMPT(full) [ 1755.154516][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1755.154530][T16439] Call Trace: [ 1755.154539][T16439] [ 1755.154547][T16439] dump_stack_lvl+0xe8/0x150 [ 1755.154588][T16439] should_fail_ex+0x3eb/0x540 [ 1755.154620][T16439] prepare_alloc_pages+0x21e/0x5f0 [ 1755.154657][T16439] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1755.154689][T16439] ? __lock_acquire+0x747/0x2de0 [ 1755.154719][T16439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1755.154760][T16439] ? policy_nodemask+0x31b/0x980 [ 1755.154780][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.154805][T16439] ? lockdep_hardirqs_on+0x7b/0x110 [ 1755.154838][T16439] alloc_pages_mpol+0x21e/0x390 [ 1755.154864][T16439] alloc_pages_noprof+0xb1/0x2b0 [ 1755.154888][T16439] get_free_pages_noprof+0xf/0x80 [ 1755.154920][T16439] __kasan_populate_vmalloc+0x38/0x1c0 [ 1755.154948][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.154973][T16439] ? do_raw_spin_unlock+0xf5/0x200 [ 1755.154999][T16439] alloc_vmap_area+0xd10/0x1410 [ 1755.155037][T16439] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1755.155058][T16439] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1755.155095][T16439] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1755.155124][T16439] ? __get_vm_area_node+0x155/0x2f0 [ 1755.155152][T16439] __get_vm_area_node+0x200/0x2f0 [ 1755.155183][T16439] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1755.155210][T16439] ? bpf_prog_calc_tag+0x51/0x370 [ 1755.155235][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.155262][T16439] ? __sys_bpf+0xd31/0xe00 [ 1755.155280][T16439] ? __x64_sys_bpf+0xba/0xd0 [ 1755.155310][T16439] ? do_syscall_64+0x16a/0x530 [ 1755.155342][T16439] ? kasan_save_track+0x4f/0x80 [ 1755.155371][T16439] ? kasan_save_track+0x3e/0x80 [ 1755.155401][T16439] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1755.155439][T16439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.155472][T16439] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1755.155509][T16439] ? bpf_prog_calc_tag+0x51/0x370 [ 1755.155529][T16439] __vmalloc_noprof+0xd2/0x120 [ 1755.155553][T16439] ? bpf_prog_calc_tag+0x51/0x370 [ 1755.155577][T16439] bpf_prog_calc_tag+0x51/0x370 [ 1755.155602][T16439] check_and_resolve_insns+0xc0/0x28e0 [ 1755.155628][T16439] ? __asan_memset+0x22/0x50 [ 1755.155655][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.155680][T16439] ? add_subprog+0x40b/0x550 [ 1755.155707][T16439] ? bpf_check+0x1934/0x34e0 [ 1755.155730][T16439] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1755.155754][T16439] ? check_subprogs+0x413/0x540 [ 1755.155787][T16439] bpf_check+0x1c12/0x34e0 [ 1755.155820][T16439] ? ktime_get_with_offset+0x93/0x2d0 [ 1755.155852][T16439] ? ktime_get_with_offset+0x93/0x2d0 [ 1755.155883][T16439] ? __pfx_bpf_check+0x10/0x10 [ 1755.155905][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.155932][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.155956][T16439] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1755.155988][T16439] bpf_prog_load+0x14da/0x1c60 [ 1755.156022][T16439] ? __pfx_bpf_prog_load+0x10/0x10 [ 1755.156059][T16439] ? __might_fault+0xaf/0x130 [ 1755.156093][T16439] __sys_bpf+0xd86/0xe00 [ 1755.156121][T16439] ? __pfx___sys_bpf+0x10/0x10 [ 1755.156145][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.156169][T16439] ? do_futex+0x3e7/0x4e0 [ 1755.156215][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.156239][T16439] ? ksys_write+0x242/0x270 [ 1755.156270][T16439] ? __pfx___se_sys_futex+0x10/0x10 [ 1755.156293][T16439] ? __pfx_ksys_write+0x10/0x10 [ 1755.156329][T16439] __x64_sys_bpf+0xba/0xd0 [ 1755.156365][T16439] do_syscall_64+0x16a/0x530 [ 1755.156392][T16439] ? trace_irq_disable+0x3b/0x140 [ 1755.156423][T16439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.156450][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.156471][T16439] RIP: 0033:0x7fe5a8f9fb19 [ 1755.156489][T16439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.156507][T16439] RSP: 002b:00007fe5a9f2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1755.156529][T16439] RAX: ffffffffffffffda RBX: 00007fe5a9225fa0 RCX: 00007fe5a8f9fb19 [ 1755.156545][T16439] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1755.156559][T16439] RBP: 00007fe5a9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1755.156573][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1755.156586][T16439] R13: 00007fe5a9226038 R14: 00007fe5a9225fa0 R15: 00007ffcc0ff05a8 [ 1755.156619][T16439] [ 1755.272769][T16439] syz.8.1147: vmalloc error: size 40, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1755.272855][T16439] CPU: 1 UID: 0 PID: 16439 Comm: syz.8.1147 Not tainted syzkaller #0 PREEMPT(full) [ 1755.272883][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1755.272900][T16439] Call Trace: [ 1755.272911][T16439] [ 1755.272922][T16439] dump_stack_lvl+0xe8/0x150 [ 1755.272971][T16439] warn_alloc+0x24d/0x270 [ 1755.273008][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.273040][T16439] ? lockdep_hardirqs_on+0x7b/0x110 [ 1755.273078][T16439] ? __pfx_warn_alloc+0x10/0x10 [ 1755.273113][T16439] ? kfree+0x1c5/0x650 [ 1755.273151][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.273182][T16439] ? __get_vm_area_node+0x219/0x2f0 [ 1755.273226][T16439] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1755.273264][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.273297][T16439] ? __sys_bpf+0xd31/0xe00 [ 1755.273321][T16439] ? __x64_sys_bpf+0xba/0xd0 [ 1755.273358][T16439] ? do_syscall_64+0x16a/0x530 [ 1755.273398][T16439] ? kasan_save_track+0x4f/0x80 [ 1755.273434][T16439] ? kasan_save_track+0x3e/0x80 [ 1755.273472][T16439] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1755.273513][T16439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.273556][T16439] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1755.273608][T16439] ? bpf_prog_calc_tag+0x51/0x370 [ 1755.273633][T16439] __vmalloc_noprof+0xd2/0x120 [ 1755.273664][T16439] ? bpf_prog_calc_tag+0x51/0x370 [ 1755.273695][T16439] bpf_prog_calc_tag+0x51/0x370 [ 1755.273728][T16439] check_and_resolve_insns+0xc0/0x28e0 [ 1755.273760][T16439] ? __asan_memset+0x22/0x50 [ 1755.273795][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.273825][T16439] ? add_subprog+0x40b/0x550 [ 1755.273859][T16439] ? bpf_check+0x1934/0x34e0 [ 1755.273889][T16439] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1755.273919][T16439] ? check_subprogs+0x413/0x540 [ 1755.273961][T16439] bpf_check+0x1c12/0x34e0 [ 1755.274005][T16439] ? ktime_get_with_offset+0x93/0x2d0 [ 1755.274045][T16439] ? ktime_get_with_offset+0x93/0x2d0 [ 1755.274083][T16439] ? __pfx_bpf_check+0x10/0x10 [ 1755.274111][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.274145][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.274177][T16439] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1755.274217][T16439] bpf_prog_load+0x14da/0x1c60 [ 1755.274261][T16439] ? __pfx_bpf_prog_load+0x10/0x10 [ 1755.274308][T16439] ? __might_fault+0xaf/0x130 [ 1755.274346][T16439] __sys_bpf+0xd86/0xe00 [ 1755.274384][T16439] ? __pfx___sys_bpf+0x10/0x10 [ 1755.274414][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.274445][T16439] ? do_futex+0x3e7/0x4e0 [ 1755.274503][T16439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.274534][T16439] ? ksys_write+0x242/0x270 [ 1755.274572][T16439] ? __pfx___se_sys_futex+0x10/0x10 [ 1755.274606][T16439] ? __pfx_ksys_write+0x10/0x10 [ 1755.274652][T16439] __x64_sys_bpf+0xba/0xd0 [ 1755.274696][T16439] do_syscall_64+0x16a/0x530 [ 1755.274729][T16439] ? trace_irq_disable+0x3b/0x140 [ 1755.274767][T16439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.274802][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.274829][T16439] RIP: 0033:0x7fe5a8f9fb19 [ 1755.274853][T16439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.274875][T16439] RSP: 002b:00007fe5a9f2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1755.274902][T16439] RAX: ffffffffffffffda RBX: 00007fe5a9225fa0 RCX: 00007fe5a8f9fb19 [ 1755.274922][T16439] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1755.274939][T16439] RBP: 00007fe5a9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1755.274957][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1755.274973][T16439] R13: 00007fe5a9226038 R14: 00007fe5a9225fa0 R15: 00007ffcc0ff05a8 [ 1755.275014][T16439] [ 1755.277420][T16315] team0: Port device team_slave_0 added [ 1755.281658][T16439] Mem-Info: [ 1755.281672][T16439] active_anon:25566 inactive_anon:0 isolated_anon:0 [ 1755.281672][T16439] active_file:5375 inactive_file:59881 isolated_file:0 [ 1755.281672][T16439] unevictable:0 dirty:116 writeback:0 [ 1755.281672][T16439] slab_reclaimable:12384 slab_unreclaimable:110721 [ 1755.281672][T16439] mapped:42622 shmem:18623 pagetables:1543 [ 1755.281672][T16439] sec_pagetables:0 bounce:0 [ 1755.281672][T16439] kernel_misc_reclaimable:0 [ 1755.281672][T16439] free:1253766 free_pcp:8286 free_cma:0 [ 1755.281762][T16439] Node 0 active_anon:102264kB inactive_anon:0kB active_file:21500kB inactive_file:239312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170488kB dirty:460kB writeback:0kB shmem:74492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13632kB pagetables:6060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1755.281834][T16439] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1755.281898][T16439] Node 0 DMA free:15112kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:216kB local_pcp:120kB free_cma:0kB [ 1755.281971][T16439] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1755.282022][T16439] Node 0 DMA32 free:1044044kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:102264kB inactive_anon:0kB active_file:21500kB inactive_file:239312kB unevictable:0kB writepending:460kB zspages:0kB present:3129332kB managed:2522808kB mlocked:0kB bounce:0kB free_pcp:32924kB local_pcp:18920kB free_cma:0kB [ 1755.282097][T16439] lowmem_reserve[]: 0 0 1 1 1 [ 1755.282145][T16439] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1755.282214][T16439] lowmem_reserve[]: 0 0 0 0 0 [ 1755.283606][T16439] Node 1 Normal free:3955908kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1755.283681][T16439] lowmem_reserve[]: 0 0 0 0 0 [ 1755.283728][T16439] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 2*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15112kB [ 1755.283907][T16439] Node 0 DMA32: 731*4kB (UME) 10624*8kB (UM) 7332*16kB (UME) 4663*32kB (ME) 3545*64kB (UME) 1473*128kB (UME) 351*256kB (UM) 54*512kB (UME) 9*1024kB (UME) 8*2048kB (UM) 32*4096kB (UM) = 1044044kB [ 1755.284118][T16439] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1755.284249][T16439] Node 1 Normal: 5*4kB (UM) 12*8kB (UM) 11*16kB (UM) 11*32kB (UM) 9*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 963*4096kB (M) = 3955908kB [ 1755.288999][T16439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1755.289021][T16439] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1755.289043][T16439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1755.289064][T16439] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1755.289085][T16439] 83875 total pagecache pages [ 1755.289096][T16439] 0 pages in swap cache [ 1755.289106][T16439] Free swap = 124996kB [ 1755.289117][T16439] Total swap = 124996kB [ 1755.289129][T16439] 2097051 pages RAM [ 1755.289139][T16439] 0 pages HighMem/MovableOnly [ 1755.289149][T16439] 434385 pages reserved [ 1755.289159][T16439] 0 pages cma reserved [ 1755.297096][T16315] team0: Port device team_slave_1 added [ 1757.427506][T16315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.427531][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.427565][T16315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.511305][T16315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.511322][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.511353][T16315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1762.929458][T16315] hsr_slave_0: entered promiscuous mode [ 1762.947042][T16315] hsr_slave_1: entered promiscuous mode [ 1762.947787][T16315] debugfs: 'hsr0' already exists in 'hsr' [ 1762.947805][T16315] Cannot create hsr debugfs directory [ 1763.149648][ T3339] hsr_slave_0: left promiscuous mode [ 1763.175897][ T3339] hsr_slave_1: left promiscuous mode [ 1763.199067][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1763.199104][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.217993][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1763.218016][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1763.266508][ T3339] hsr_slave_0: left promiscuous mode [ 1763.271395][ T3339] hsr_slave_1: left promiscuous mode [ 1763.272077][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.275561][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1763.325348][ T3339] veth1_macvtap: left promiscuous mode [ 1763.325412][ T3339] veth0_macvtap: left promiscuous mode [ 1763.325527][ T3339] veth1_vlan: left promiscuous mode [ 1763.325609][ T3339] veth0_vlan: left promiscuous mode [ 1768.464366][T13737] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1768.466508][T13737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1768.469005][T13737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1768.471061][T13737] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1768.471714][T13737] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1768.574351][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1768.668456][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1770.614467][ T8258] Bluetooth: hci6: command tx timeout [ 1771.018066][T16518] loop5: detected capacity change from 0 to 512 [ 1771.156000][T16518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1771.156100][T16518] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1771.216825][ T30] audit: type=1800 audit(1794221964.548:7605): pid=16518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1158" name="file1" dev="loop5" ino=15 res=0 errno=-22 [ 1771.603046][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1771.643327][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1771.951495][T13060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1772.694138][ T8258] Bluetooth: hci6: command tx timeout [ 1774.240411][T16544] jffs2: notice: (16544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1774.312526][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.312776][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.312942][T16368] bridge_slave_0: entered allmulticast mode [ 1774.356202][T16368] bridge_slave_0: entered promiscuous mode [ 1774.416767][T16368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.416929][T16368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.417049][T16368] bridge_slave_1: entered allmulticast mode [ 1774.449077][T16368] bridge_slave_1: entered promiscuous mode [ 1774.772309][ T8258] Bluetooth: hci6: command tx timeout [ 1775.922498][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.947367][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.398100][T16368] team0: Port device team_slave_0 added [ 1776.442733][T16368] team0: Port device team_slave_1 added [ 1776.762118][T16503] rxe_eth0 speed is unknown, defaulting to 1000 [ 1776.852354][ T8258] Bluetooth: hci6: command tx timeout [ 1776.869374][ T30] audit: type=1326 audit(1794221970.198:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16566 comm="syz.8.1164" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5a8f9fb19 code=0x0 [ 1776.874596][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.874613][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.874644][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.967573][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.987749][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.987777][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.953885][T16368] hsr_slave_0: entered promiscuous mode [ 1777.971673][T16368] hsr_slave_1: entered promiscuous mode [ 1777.990444][T16577] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1164'. [ 1778.757147][T16240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1778.757964][T16571] loop8: detected capacity change from 0 to 8 [ 1778.820107][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1778.824882][T16240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1778.868190][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1778.881642][T16240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1778.916906][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1779.037330][T16240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1779.096632][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1784.575377][T13737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1784.580117][T13737] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1784.603797][T13737] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1784.606931][T13737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1784.607598][T13737] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1785.279309][T16635] jffs2: notice: (16635) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1785.811946][T16503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.815575][T16503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.815721][T16503] bridge_slave_0: entered allmulticast mode [ 1785.857450][T16503] bridge_slave_0: entered promiscuous mode [ 1785.880616][T16503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.880729][T16503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.880868][T16503] bridge_slave_1: entered allmulticast mode [ 1785.945258][T16503] bridge_slave_1: entered promiscuous mode [ 1786.692550][T13737] Bluetooth: hci7: command tx timeout [ 1786.717543][ T3339] bridge_slave_1: left allmulticast mode [ 1786.717568][ T3339] bridge_slave_1: left promiscuous mode [ 1786.717757][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.777701][ T3339] bridge_slave_0: left allmulticast mode [ 1786.777734][ T3339] bridge_slave_0: left promiscuous mode [ 1786.791077][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.899915][ T3339] bridge_slave_1: left allmulticast mode [ 1786.899941][ T3339] bridge_slave_1: left promiscuous mode [ 1786.900108][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.942012][ T3339] bridge_slave_0: left allmulticast mode [ 1786.942032][ T3339] bridge_slave_0: left promiscuous mode [ 1786.942183][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.293871][T16658] jffs2: notice: (16658) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1787.470568][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.501281][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.534980][ T3339] bond0 (unregistering): Released all slaves [ 1787.969291][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1788.016653][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1788.059565][ T3339] bond0 (unregistering): Released all slaves [ 1788.119624][T16503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.174693][T16503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.459245][T16503] team0: Port device team_slave_0 added [ 1788.773305][T13737] Bluetooth: hci7: command tx timeout [ 1788.817886][T16503] team0: Port device team_slave_1 added [ 1790.230596][T16503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1790.230618][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.230650][T16503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.392564][T16503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1790.392586][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.392615][T16503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.743400][T16622] rxe_eth0 speed is unknown, defaulting to 1000 [ 1790.852354][T13737] Bluetooth: hci7: command tx timeout [ 1791.095323][T16315] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1791.136795][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1791.174887][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.174954][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.220955][T16503] hsr_slave_0: entered promiscuous mode [ 1791.237477][T16503] hsr_slave_1: entered promiscuous mode [ 1791.247495][T16503] debugfs: 'hsr0' already exists in 'hsr' [ 1791.247514][T16503] Cannot create hsr debugfs directory [ 1791.254505][T16315] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1791.300455][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1791.301152][T16315] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1791.337157][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1791.541332][T16315] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1791.585397][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1793.022361][T13737] Bluetooth: hci7: command tx timeout [ 1795.578010][ T3339] hsr_slave_0: left promiscuous mode [ 1795.594033][ T3339] hsr_slave_1: left promiscuous mode [ 1795.595709][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.619558][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.696037][ T3339] hsr_slave_0: left promiscuous mode [ 1795.842439][ T3339] hsr_slave_1: left promiscuous mode [ 1795.924428][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.351174][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.928061][T16714] program syz.5.1181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1798.503718][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1798.581560][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1799.350159][ T8258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1799.354444][ T8258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1799.360487][ T8258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1799.363417][ T8258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1799.364075][ T8258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1800.006386][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1800.077016][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1801.413757][ T8258] Bluetooth: hci4: command tx timeout [ 1804.760612][ T8258] Bluetooth: hci4: command tx timeout [ 1806.772362][T13737] Bluetooth: hci4: command tx timeout [ 1807.295531][ T8258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1807.299901][ T8258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1807.324159][ T8258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1807.335991][ T8258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1807.336640][ T8258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1807.798931][T16724] rxe_eth0 speed is unknown, defaulting to 1000 [ 1807.965375][T16622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.965465][T16622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.965567][T16622] bridge_slave_0: entered allmulticast mode [ 1807.975509][T16622] bridge_slave_0: entered promiscuous mode [ 1808.383170][T16622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.383363][T16622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.383510][T16622] bridge_slave_1: entered allmulticast mode [ 1808.389643][T16622] bridge_slave_1: entered promiscuous mode [ 1808.852380][ T8258] Bluetooth: hci4: command tx timeout [ 1809.028339][T16622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.280327][T16622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.504092][ T8258] Bluetooth: hci0: command tx timeout [ 1809.728892][T16622] team0: Port device team_slave_0 added [ 1809.796172][T16622] team0: Port device team_slave_1 added [ 1810.543717][T16622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.543738][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.543772][T16622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.555097][T16622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.555123][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.555154][T16622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.007722][T16773] rxe_eth0 speed is unknown, defaulting to 1000 [ 1811.746746][ T8258] Bluetooth: hci0: command tx timeout [ 1812.798761][T16622] hsr_slave_0: entered promiscuous mode [ 1812.811831][T16622] hsr_slave_1: entered promiscuous mode [ 1812.821110][T16622] debugfs: 'hsr0' already exists in 'hsr' [ 1812.821130][T16622] Cannot create hsr debugfs directory [ 1813.364950][ T3339] bridge_slave_1: left allmulticast mode [ 1813.364975][ T3339] bridge_slave_1: left promiscuous mode [ 1813.365160][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.427220][ T3339] bridge_slave_0: left allmulticast mode [ 1813.427241][ T3339] bridge_slave_0: left promiscuous mode [ 1813.444072][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.570040][ T3339] bridge_slave_1: left allmulticast mode [ 1813.570073][ T3339] bridge_slave_1: left promiscuous mode [ 1813.570286][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.646857][ T3339] bridge_slave_0: left allmulticast mode [ 1813.646887][ T3339] bridge_slave_0: left promiscuous mode [ 1813.647088][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.813637][ T8258] Bluetooth: hci0: command tx timeout [ 1814.295382][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1814.349068][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1814.391045][ T3339] bond0 (unregistering): Released all slaves [ 1815.045689][ T30] audit: type=1326 audit(1794222008.378:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16833 comm="syz.5.1189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4907b9fb19 code=0x0 [ 1815.119374][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.181661][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.230592][ T3339] bond0 (unregistering): Released all slaves [ 1815.404195][T16840] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1189'. [ 1815.534726][T16842] loop5: detected capacity change from 0 to 8 [ 1815.902333][ T8258] Bluetooth: hci0: command tx timeout [ 1816.408483][T16503] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1816.438319][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1816.441030][T16503] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1816.510074][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1816.660097][T16503] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1816.717459][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1816.727201][T16503] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1816.786513][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1817.009178][T16854] jffs2: notice: (16854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1819.834743][ T3339] hsr_slave_0: left promiscuous mode [ 1819.835486][ T3339] hsr_slave_1: left promiscuous mode [ 1819.837947][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1819.838747][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1819.890997][ T3339] hsr_slave_0: left promiscuous mode [ 1819.891614][ T3339] hsr_slave_1: left promiscuous mode [ 1819.894619][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1819.910320][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.117800][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1821.164499][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1823.259410][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1823.528349][T16900] program syz.8.1196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1824.514931][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1825.170972][T16724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.173265][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.173427][T16724] bridge_slave_0: entered allmulticast mode [ 1825.203609][T16724] bridge_slave_0: entered promiscuous mode [ 1825.303692][T16724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.303809][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.303943][T16724] bridge_slave_1: entered allmulticast mode [ 1825.317787][T16724] bridge_slave_1: entered promiscuous mode [ 1825.944156][T16724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.090131][T16724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.467066][T16724] team0: Port device team_slave_0 added [ 1826.492684][T16724] team0: Port device team_slave_1 added [ 1826.708621][T16724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.708646][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.708683][T16724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.721036][T16724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.721053][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.721086][T16724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.161505][T16724] hsr_slave_0: entered promiscuous mode [ 1827.168083][T16724] hsr_slave_1: entered promiscuous mode [ 1827.175101][T16724] debugfs: 'hsr0' already exists in 'hsr' [ 1827.175120][T16724] Cannot create hsr debugfs directory [ 1829.247380][T13737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1829.251197][T13737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1829.251907][T13737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1829.276680][T13737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1829.282024][T13737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1829.478422][T16773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.478576][T16773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.478728][T16773] bridge_slave_0: entered allmulticast mode [ 1829.516236][T16773] bridge_slave_0: entered promiscuous mode [ 1829.525625][T16773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.525764][T16773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.525900][T16773] bridge_slave_1: entered allmulticast mode [ 1829.558802][T16773] bridge_slave_1: entered promiscuous mode [ 1830.034961][T16773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.179263][T16773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1831.489018][ T8258] Bluetooth: hci3: command tx timeout [ 1831.671055][T16773] team0: Port device team_slave_0 added [ 1831.694050][T16773] team0: Port device team_slave_1 added [ 1833.492316][ T8258] Bluetooth: hci3: command tx timeout [ 1834.220090][T16622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1834.243743][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1834.247373][T16622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1834.274569][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1834.287647][T16622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1834.307316][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1834.314127][T16773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1834.314145][T16773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.314178][T16773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1834.520064][T16773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1834.520088][T16773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.520121][T16773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1835.572365][ T8258] Bluetooth: hci3: command tx timeout [ 1835.618224][T16622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1835.653406][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1836.164435][T16773] hsr_slave_0: entered promiscuous mode [ 1836.176490][T16773] hsr_slave_1: entered promiscuous mode [ 1836.179971][T16773] debugfs: 'hsr0' already exists in 'hsr' [ 1836.179986][T16773] Cannot create hsr debugfs directory [ 1836.204124][T16917] rxe_eth0 speed is unknown, defaulting to 1000 [ 1836.874033][T16956] jffs2: notice: (16956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1837.652383][ T8258] Bluetooth: hci3: command tx timeout [ 1837.922084][ T3339] bridge_slave_1: left allmulticast mode [ 1837.922109][ T3339] bridge_slave_1: left promiscuous mode [ 1837.923517][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.955308][ T3339] bridge_slave_0: left allmulticast mode [ 1837.955328][ T3339] bridge_slave_0: left promiscuous mode [ 1837.955487][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.018337][ T3339] bridge_slave_1: left allmulticast mode [ 1838.018366][ T3339] bridge_slave_1: left promiscuous mode [ 1838.018572][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.045202][ T3339] bridge_slave_0: left allmulticast mode [ 1838.045227][ T3339] bridge_slave_0: left promiscuous mode [ 1838.045418][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.702929][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1838.761131][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.780825][ T3339] bond0 (unregistering): Released all slaves [ 1839.363748][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1839.430278][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1839.451002][ T3339] bond0 (unregistering): Released all slaves [ 1840.502479][T16970] jffs2: notice: (16970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1841.914258][T16724] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1841.953982][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1841.976180][T16724] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1842.026508][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1842.419958][T16724] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1842.468997][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1842.469794][T16724] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1842.517545][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1842.731178][T16622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.758054][T13737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1843.774151][T13737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1843.777245][T13737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1843.816319][T13737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1843.837709][T13737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1844.135915][ T3339] hsr_slave_0: left promiscuous mode [ 1844.137732][ T3339] hsr_slave_1: left promiscuous mode [ 1844.138408][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.139370][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1844.404766][ T3339] hsr_slave_0: left promiscuous mode [ 1844.421803][ T3339] hsr_slave_1: left promiscuous mode [ 1844.429714][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1845.345130][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.897547][ T8258] Bluetooth: hci5: command tx timeout [ 1848.248870][ T8258] Bluetooth: hci5: command tx timeout [ 1848.664555][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1848.723233][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1850.292457][ T8258] Bluetooth: hci5: command tx timeout [ 1850.509182][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1850.621088][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1851.966233][T16917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.968318][T16917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.968447][T16917] bridge_slave_0: entered allmulticast mode [ 1852.017832][T16917] bridge_slave_0: entered promiscuous mode [ 1852.134076][T16917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.138107][T16917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.138227][T16917] bridge_slave_1: entered allmulticast mode [ 1852.170863][T16917] bridge_slave_1: entered promiscuous mode [ 1852.372358][ T8258] Bluetooth: hci5: command tx timeout [ 1852.622559][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.622630][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.694233][T16917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1852.701744][T16917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1852.836217][T16917] team0: Port device team_slave_0 added [ 1852.859549][T16917] team0: Port device team_slave_1 added [ 1853.016548][T16773] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1853.077878][T16773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1853.078912][T16773] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1853.142542][T16773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1853.311269][T16917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.311291][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.311324][T16917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1853.363215][T16773] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1853.400853][T16773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1853.445673][T16724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.449831][T16917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1853.449847][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.449880][T16917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1853.452940][T16773] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1853.554763][T16773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1854.054985][T16994] rxe_eth0 speed is unknown, defaulting to 1000 [ 1854.264357][T16917] hsr_slave_0: entered promiscuous mode [ 1854.270136][T16917] hsr_slave_1: entered promiscuous mode [ 1854.408877][T16724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.589908][T10353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.590001][T10353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1855.593518][T15182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.593604][T15182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1856.099014][T17076] lo: entered allmulticast mode [ 1856.099779][T17076] tunl0: entered allmulticast mode [ 1856.100289][T17076] gre0: entered allmulticast mode [ 1856.113592][T17076] gretap0: entered allmulticast mode [ 1856.128442][T17076] erspan0: entered allmulticast mode [ 1856.149690][T17076] ip_vti0: entered allmulticast mode [ 1856.150188][T17076] ip6_vti0: entered allmulticast mode [ 1856.157661][T17076] sit0: entered allmulticast mode [ 1856.161455][T17076] ip6tnl0: entered allmulticast mode [ 1856.182115][T17076] ip6gre0: entered allmulticast mode [ 1856.196898][T17076] syz_tun: entered allmulticast mode [ 1856.197496][T17076] ip6gretap0: entered allmulticast mode [ 1856.224250][T17076] bridge0: entered allmulticast mode [ 1856.224823][T17076] vcan0: entered allmulticast mode [ 1856.228349][T17076] bond0: entered allmulticast mode [ 1856.228365][T17076] bond_slave_0: entered allmulticast mode [ 1856.228381][T17076] bond_slave_1: entered allmulticast mode [ 1856.253261][T17076] team0: entered allmulticast mode [ 1856.253283][T17076] team_slave_0: entered allmulticast mode [ 1856.253303][T17076] team_slave_1: entered allmulticast mode [ 1856.287340][T17076] dummy0: entered allmulticast mode [ 1856.290377][T17076] nlmon0: entered allmulticast mode [ 1856.297546][T17076] batadv0: entered allmulticast mode [ 1857.520066][T17076] vxcan0: entered allmulticast mode [ 1857.520647][T17076] vxcan1: entered allmulticast mode [ 1857.521121][T17076] veth0: entered allmulticast mode [ 1857.545680][T17076] veth1: entered allmulticast mode [ 1857.546207][T17076] wg0: entered allmulticast mode [ 1857.593891][T17076] wg1: entered allmulticast mode [ 1857.595007][T17076] wg2: entered allmulticast mode [ 1857.620808][T17076] veth0_to_bridge: entered allmulticast mode [ 1857.641832][T17076] veth1_to_bridge: entered allmulticast mode [ 1857.664887][T17076] veth0_to_bond: entered allmulticast mode [ 1857.682988][T17076] veth1_to_bond: entered allmulticast mode [ 1857.704845][T17076] veth0_to_team: entered allmulticast mode [ 1857.720859][T17076] veth1_to_team: entered allmulticast mode [ 1857.730018][T17076] veth0_to_batadv: entered allmulticast mode [ 1857.746711][T17076] batadv_slave_0: entered allmulticast mode [ 1857.759806][T17076] veth1_to_batadv: entered allmulticast mode [ 1857.760408][T17076] batadv_slave_1: entered allmulticast mode [ 1857.760923][T17076] xfrm0: entered allmulticast mode [ 1857.783591][T17076] veth0_to_hsr: entered allmulticast mode [ 1857.784138][T17076] hsr_slave_0: entered allmulticast mode [ 1857.784635][T17076] veth1_to_hsr: entered allmulticast mode [ 1857.811093][T17076] hsr_slave_1: entered allmulticast mode [ 1857.811869][T17076] hsr0: entered allmulticast mode [ 1857.838253][T17076] veth1_virt_wifi: entered allmulticast mode [ 1857.838817][T17076] veth0_virt_wifi: entered allmulticast mode [ 1857.860767][T17076] virt_wifi0: entered allmulticast mode [ 1857.860946][T17076] veth1_vlan: entered allmulticast mode [ 1857.862170][T17076] veth0_vlan: entered allmulticast mode [ 1857.891105][T17076] vlan0: entered allmulticast mode [ 1857.900343][T17076] vlan1: entered allmulticast mode [ 1857.900921][T17076] macvlan0: entered allmulticast mode [ 1857.901670][T17076] macvlan1: entered allmulticast mode [ 1857.927601][T17076] ipvlan0: entered allmulticast mode [ 1857.927734][T17076] ipvlan1: entered allmulticast mode [ 1857.927858][T17076] veth1_macvtap: entered allmulticast mode [ 1857.928389][T17076] veth0_macvtap: entered allmulticast mode [ 1857.959691][T17076] macvtap0: entered allmulticast mode [ 1857.960285][T17076] macsec0: entered allmulticast mode [ 1857.960771][T17076] geneve0: entered allmulticast mode [ 1857.990278][T17076] geneve1: entered allmulticast mode [ 1857.991101][T17076] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1857.998240][T17076] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 1857.999049][T17076] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 1858.024883][T17076] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 1858.026016][T17076] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 1858.028605][T17076] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 1858.602904][T17094] 0x000000000003-0x000000010001 : "" [ 1858.723475][T17094] ftl_cs: FTL header corrupt! [ 1861.994475][T13737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1861.998997][T13737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1862.000949][T13737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1862.017323][T13737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1862.032063][T13737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1862.147661][T16773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1862.845003][ T3339] bridge_slave_1: left allmulticast mode [ 1862.845033][ T3339] bridge_slave_1: left promiscuous mode [ 1862.845251][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.909015][ T3339] bridge_slave_0: left allmulticast mode [ 1862.909045][ T3339] bridge_slave_0: left promiscuous mode [ 1862.909287][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.094566][ T3339] bridge_slave_1: left allmulticast mode [ 1863.094597][ T3339] bridge_slave_1: left promiscuous mode [ 1863.094813][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.160002][ T3339] bridge_slave_0: left allmulticast mode [ 1863.160029][ T3339] bridge_slave_0: left promiscuous mode [ 1863.179077][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.113637][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1864.134989][T13737] Bluetooth: hci4: command tx timeout [ 1864.178489][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1864.229142][ T3339] bond0 (unregistering): Released all slaves [ 1864.240987][T17146] jffs2: notice: (17146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1866.212346][T13737] Bluetooth: hci4: command tx timeout [ 1866.839076][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.873402][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.876056][ T3339] bond0 (unregistering): Released all slaves [ 1867.679703][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.680759][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.680900][T16994] bridge_slave_0: entered allmulticast mode [ 1867.715942][T16994] bridge_slave_0: entered promiscuous mode [ 1867.733675][T16917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1867.768472][T16917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1867.771220][T16917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1867.931638][T16917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1867.939728][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.939820][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.939934][T16994] bridge_slave_1: entered allmulticast mode [ 1868.294757][T13737] Bluetooth: hci4: command tx timeout [ 1868.438174][T16994] bridge_slave_1: entered promiscuous mode [ 1868.748815][T16917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1868.803906][T16917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1868.807870][T16917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1868.883786][T16917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1868.937760][ T8258] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1868.940832][ T8258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1868.957274][ T8258] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1868.964059][ T8258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1868.964749][ T8258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1869.197948][T17119] rxe_eth0 speed is unknown, defaulting to 1000 [ 1869.490491][T17181] jffs2: notice: (17181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1869.585069][T16994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.684313][ T3339] hsr_slave_0: left promiscuous mode [ 1869.692976][ T3339] hsr_slave_1: left promiscuous mode [ 1869.710025][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1869.723287][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1869.771763][ T3339] hsr_slave_0: left promiscuous mode [ 1869.784720][ T3339] hsr_slave_1: left promiscuous mode [ 1869.785636][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1869.802509][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.372334][ T8258] Bluetooth: hci4: command tx timeout [ 1871.093275][ T8258] Bluetooth: hci6: command tx timeout [ 1873.174836][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1873.183837][ T8258] Bluetooth: hci6: command tx timeout [ 1873.224642][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1874.297176][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1874.349511][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1875.060181][T16994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1875.252445][ T8258] Bluetooth: hci6: command tx timeout [ 1875.416435][T16994] team0: Port device team_slave_0 added [ 1876.161016][T16994] team0: Port device team_slave_1 added [ 1878.186489][ T8258] Bluetooth: hci6: command tx timeout [ 1878.218430][T16994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.218448][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.218480][T16994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.372283][T16994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.372303][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.372335][T16994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.711054][T16994] hsr_slave_0: entered promiscuous mode [ 1878.714910][T16994] hsr_slave_1: entered promiscuous mode [ 1878.717318][T16994] debugfs: 'hsr0' already exists in 'hsr' [ 1878.717336][T16994] Cannot create hsr debugfs directory [ 1879.281648][T17167] rxe_eth0 speed is unknown, defaulting to 1000 [ 1880.085561][T17239] qrtr: Invalid version 0 [ 1881.749052][ T5292] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1882.126042][T16917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.191739][T17119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.191854][T17119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.192006][T17119] bridge_slave_0: entered allmulticast mode [ 1882.220290][T17119] bridge_slave_0: entered promiscuous mode [ 1884.185211][T17119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.185416][T17119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.185555][T17119] bridge_slave_1: entered allmulticast mode [ 1884.209763][T17119] bridge_slave_1: entered promiscuous mode [ 1884.313161][T17119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.419978][T17119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1884.511465][T16917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1884.532630][T17119] team0: Port device team_slave_0 added [ 1886.608189][T17119] team0: Port device team_slave_1 added [ 1886.954547][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.954659][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1886.958607][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.958734][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1887.049091][ T5292] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1887.100905][T17119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.100925][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.100957][T17119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.137664][T17119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.137685][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.137718][T17119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1887.454641][T16994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1887.476676][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1887.649335][T16994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1887.677139][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1887.678055][T16994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1887.696851][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1887.749945][T17119] hsr_slave_0: entered promiscuous mode [ 1887.750771][T17119] hsr_slave_1: entered promiscuous mode [ 1887.756020][T17119] debugfs: 'hsr0' already exists in 'hsr' [ 1887.756038][T17119] Cannot create hsr debugfs directory [ 1887.772997][T16994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1887.811123][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1888.046771][ T5292] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1888.750399][T13737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1888.751513][T13737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1888.752212][T13737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1888.775568][T13737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1888.776376][T13737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1888.834979][T17321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1889.056556][T17332] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1889.056859][T17332] CIFS: Attempting to mount //127.0.0.1/share [ 1889.281889][T17167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.295181][T17167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.301612][T17167] bridge_slave_0: entered allmulticast mode [ 1889.310711][T17167] bridge_slave_0: entered promiscuous mode [ 1889.985451][T17332] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1890.129643][T17167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.129816][T17167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.129977][T17167] bridge_slave_1: entered allmulticast mode [ 1890.136408][T17167] bridge_slave_1: entered promiscuous mode [ 1890.405299][T17167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1890.470476][T17344] vlan2: entered promiscuous mode [ 1890.470502][T17344] bond0: entered promiscuous mode [ 1890.470519][T17344] bond_slave_0: entered promiscuous mode [ 1890.470737][T17344] bond_slave_1: entered promiscuous mode [ 1890.524917][T17167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.604933][ T8258] Bluetooth: hci0: command tx timeout [ 1897.653538][ T8258] Bluetooth: hci0: command tx timeout [ 1899.735840][ T8258] Bluetooth: hci0: command tx timeout [ 1899.793632][T17167] team0: Port device team_slave_0 added [ 1899.801618][T17167] team0: Port device team_slave_1 added [ 1899.843814][T17167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.843831][T17167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.843864][T17167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.851944][T17167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.851961][T17167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.851993][T17167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.165843][T17167] hsr_slave_0: entered promiscuous mode [ 1900.171176][T17167] hsr_slave_1: entered promiscuous mode [ 1900.175284][T17167] debugfs: 'hsr0' already exists in 'hsr' [ 1900.175303][T17167] Cannot create hsr debugfs directory [ 1900.566638][T17323] rxe_eth0 speed is unknown, defaulting to 1000 [ 1900.915003][ T3339] bridge_slave_1: left allmulticast mode [ 1900.915034][ T3339] bridge_slave_1: left promiscuous mode [ 1900.915243][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.942012][ T3339] bridge_slave_0: left allmulticast mode [ 1900.942038][ T3339] bridge_slave_0: left promiscuous mode [ 1900.955595][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.028238][ T3339] bridge_slave_1: left allmulticast mode [ 1901.028270][ T3339] bridge_slave_1: left promiscuous mode [ 1901.028481][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.057053][ T3339] bridge_slave_0: left allmulticast mode [ 1901.057080][ T3339] bridge_slave_0: left promiscuous mode [ 1901.057322][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.691218][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1901.719262][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1901.729869][ T3339] bond0 (unregistering): Released all slaves [ 1901.812461][ T8258] Bluetooth: hci0: command tx timeout [ 1902.131265][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1902.145452][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1902.148832][ T3339] bond0 (unregistering): Released all slaves [ 1902.219482][T16994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.410566][T13737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1904.428468][T13737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1904.431467][T13737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1904.452097][T13737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1904.461971][T13737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1907.140091][ T8258] Bluetooth: hci3: command tx timeout [ 1909.204501][ T8258] Bluetooth: hci3: command tx timeout [ 1911.373685][ T8258] Bluetooth: hci3: command tx timeout [ 1911.963691][ T3339] hsr_slave_0: left promiscuous mode [ 1911.980826][ T3339] hsr_slave_1: left promiscuous mode [ 1911.981798][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1912.022529][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1912.267583][ T3339] hsr_slave_0: left promiscuous mode [ 1912.278579][ T3339] hsr_slave_1: left promiscuous mode [ 1912.291202][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1912.308854][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.079053][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.079118][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.080133][T13737] Bluetooth: hci3: command tx timeout [ 1914.550962][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1914.603880][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1915.268983][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1915.306595][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1915.370332][T17466] CIFS: Attempting to mount //127.0.0.1/share [ 1915.434542][T17467] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1915.450085][T17466] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1917.639428][T17426] rxe_eth0 speed is unknown, defaulting to 1000 [ 1918.243659][T17494] blktrace: Concurrent blktraces are not allowed on loop16 [ 1919.983909][T17119] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1920.050650][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1920.064662][T17119] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1920.092544][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1920.165228][T17119] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1920.198572][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1920.201206][T17119] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1920.288811][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1922.156187][T17119] kthread_run failed with err -4 [ 1922.315296][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.315446][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.315616][T17323] bridge_slave_0: entered allmulticast mode [ 1922.323244][T17323] bridge_slave_0: entered promiscuous mode [ 1922.409470][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.409654][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.409827][T17323] bridge_slave_1: entered allmulticast mode [ 1922.418068][T17323] bridge_slave_1: entered promiscuous mode [ 1922.685930][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.745191][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.141618][T17323] team0: Port device team_slave_0 added [ 1923.269768][T17323] team0: Port device team_slave_1 added [ 1923.687182][T13737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1923.690579][T13737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1923.691355][T13737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1923.693364][T13737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1923.694331][T13737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1925.548426][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.548448][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.548482][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.617561][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.617583][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.617617][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.734110][T13737] Bluetooth: hci4: command tx timeout [ 1926.308663][T17323] hsr_slave_0: entered promiscuous mode [ 1926.311361][T17323] hsr_slave_1: entered promiscuous mode [ 1926.327544][T17323] debugfs: 'hsr0' already exists in 'hsr' [ 1926.327569][T17323] Cannot create hsr debugfs directory [ 1927.070970][T17529] rxe_eth0 speed is unknown, defaulting to 1000 [ 1927.072490][T17167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1927.094928][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1927.397071][T17167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1927.419879][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1927.421577][T17167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1927.436991][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1928.186129][T13737] Bluetooth: hci4: command tx timeout [ 1928.402602][T17167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1928.411407][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1928.586504][T17426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.586615][T17426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.586765][T17426] bridge_slave_0: entered allmulticast mode [ 1928.593172][T17426] bridge_slave_0: entered promiscuous mode [ 1928.664287][T17426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.664433][T17426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.664577][T17426] bridge_slave_1: entered allmulticast mode [ 1928.669151][T17426] bridge_slave_1: entered promiscuous mode [ 1928.956216][T17426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.017977][T17426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.088616][T17426] team0: Port device team_slave_0 added [ 1929.091875][T17426] team0: Port device team_slave_1 added [ 1929.145188][T17426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1929.145211][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.145244][T17426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1929.206894][T17426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1929.206915][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.206948][T17426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1929.316978][T17426] hsr_slave_0: entered promiscuous mode [ 1929.318174][T17426] hsr_slave_1: entered promiscuous mode [ 1929.319474][T17426] debugfs: 'hsr0' already exists in 'hsr' [ 1929.319504][T17426] Cannot create hsr debugfs directory [ 1929.790034][ T8258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1929.803525][ T8258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1929.804379][ T8258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1929.805755][ T8258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1929.806432][ T8258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1930.514462][T17600] Bluetooth: hci4: command tx timeout [ 1930.761322][ T3339] bridge_slave_1: left allmulticast mode [ 1930.761354][ T3339] bridge_slave_1: left promiscuous mode [ 1930.761585][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.786190][ T3339] bridge_slave_0: left allmulticast mode [ 1930.786222][ T3339] bridge_slave_0: left promiscuous mode [ 1930.786503][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.812917][ T3339] bridge_slave_1: left allmulticast mode [ 1930.812950][ T3339] bridge_slave_1: left promiscuous mode [ 1930.813172][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.816568][ T3339] bridge_slave_0: left allmulticast mode [ 1930.816598][ T3339] bridge_slave_0: left promiscuous mode [ 1930.818242][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.130456][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1931.144743][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1931.147175][ T3339] bond0 (unregistering): Released all slaves [ 1931.291132][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1931.309654][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1931.310988][ T3339] bond0 (unregistering): Released all slaves [ 1931.357247][ T5292] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1931.357694][T17529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.357868][T17529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.357994][T17529] bridge_slave_0: entered allmulticast mode [ 1931.388885][T17529] bridge_slave_0: entered promiscuous mode [ 1931.399940][T17529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.400052][T17529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.400181][T17529] bridge_slave_1: entered allmulticast mode [ 1931.401942][T17529] bridge_slave_1: entered promiscuous mode [ 1931.676836][T17529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1931.700952][T17529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1931.822259][T13737] Bluetooth: hci5: command tx timeout [ 1931.892772][T17529] team0: Port device team_slave_0 added [ 1931.911578][T17529] team0: Port device team_slave_1 added [ 1932.051084][T17323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1932.076674][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1932.079524][T17323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1932.101014][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1932.111197][T17323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1932.126976][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1932.142896][T17529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.142918][T17529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.142951][T17529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.146976][T17529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.146996][T17529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.147028][T17529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.183199][T17323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1932.196052][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1932.343420][ T3339] hsr_slave_0: left promiscuous mode [ 1932.347294][ T3339] hsr_slave_1: left promiscuous mode [ 1932.348284][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1932.350305][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1932.370627][ T3339] hsr_slave_0: left promiscuous mode [ 1932.378193][ T3339] hsr_slave_1: left promiscuous mode [ 1932.379749][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1932.385890][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1932.534095][T13737] Bluetooth: hci4: command tx timeout [ 1932.572998][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1932.590594][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1932.852313][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1932.870067][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1933.056271][T17529] hsr_slave_0: entered promiscuous mode [ 1933.057439][T17529] hsr_slave_1: entered promiscuous mode [ 1933.058565][T17596] rxe_eth0 speed is unknown, defaulting to 1000 [ 1933.892992][T17323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.895147][T13737] Bluetooth: hci5: command tx timeout [ 1934.098892][T17323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.178599][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.178712][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.183822][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.183934][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.521859][T17426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1934.536707][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1934.537811][T17426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1934.559669][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1934.627498][T17596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.627704][T17596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.627911][T17596] bridge_slave_0: entered allmulticast mode [ 1934.629957][T17596] bridge_slave_0: entered promiscuous mode [ 1934.669635][T17426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1934.682698][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1934.683739][T17426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1934.698231][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1934.797986][T17596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.798178][T17596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.798348][T17596] bridge_slave_1: entered allmulticast mode [ 1934.800311][T17596] bridge_slave_1: entered promiscuous mode [ 1934.975242][T17596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.980421][T17596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1935.131781][T17596] team0: Port device team_slave_0 added [ 1935.141259][T17596] team0: Port device team_slave_1 added [ 1935.230449][T17596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.230472][T17596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1935.230504][T17596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.243462][T17596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.243485][T17596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1935.243517][T17596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.438386][T17596] hsr_slave_0: entered promiscuous mode [ 1935.439635][T17596] hsr_slave_1: entered promiscuous mode [ 1935.440418][T17596] debugfs: 'hsr0' already exists in 'hsr' [ 1935.440439][T17596] Cannot create hsr debugfs directory [ 1935.810613][ T3339] bridge_slave_1: left allmulticast mode [ 1935.810647][ T3339] bridge_slave_1: left promiscuous mode [ 1935.810882][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.835335][ T3339] bridge_slave_0: left allmulticast mode [ 1935.835366][ T3339] bridge_slave_0: left promiscuous mode [ 1935.835606][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.860687][ T3339] bridge_slave_1: left allmulticast mode [ 1935.860719][ T3339] bridge_slave_1: left promiscuous mode [ 1935.860932][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.875213][ T3339] bridge_slave_0: left allmulticast mode [ 1935.875247][ T3339] bridge_slave_0: left promiscuous mode [ 1935.880437][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.972874][T13737] Bluetooth: hci5: command tx timeout [ 1936.030388][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.041642][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.052004][ T3339] bond0 (unregistering): Released all slaves [ 1936.130948][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.142064][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.152926][ T3339] bond0 (unregistering): Released all slaves [ 1936.710098][T17529] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1936.743092][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1936.746321][T17529] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1936.774075][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1936.811736][T17529] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1936.833575][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1936.836433][T17529] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1936.849090][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1937.177902][T17426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1937.318427][T17426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1937.376204][ T3339] hsr_slave_0: left promiscuous mode [ 1937.377104][ T3339] hsr_slave_1: left promiscuous mode [ 1937.378072][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.378852][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.395002][ T3339] hsr_slave_0: left promiscuous mode [ 1937.396632][ T3339] hsr_slave_1: left promiscuous mode [ 1937.399181][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.405458][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.570761][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1937.592023][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1937.851042][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 1937.866837][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 1937.989798][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.989901][ T8749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1938.007361][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1938.052249][T13737] Bluetooth: hci5: command tx timeout [ 1938.069604][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.069709][ T8749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1938.327182][T17323] veth0_vlan: entered promiscuous mode [ 1938.386199][T17323] veth1_vlan: entered promiscuous mode [ 1938.527344][T17323] veth0_macvtap: entered promiscuous mode [ 1938.536980][T17529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.602057][T17596] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1938.614246][T17596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1938.615999][T17323] veth1_macvtap: entered promiscuous mode [ 1938.625271][T17596] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1938.646739][T17596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1938.649238][T17596] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1938.667087][T17596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1938.689168][T17596] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1938.705012][T17596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1938.728480][T17529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.766207][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1938.766327][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1938.774356][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1938.798288][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.798398][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1938.827838][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1938.876781][ T3339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.877072][ T3339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.003555][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.003638][ T1102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.120746][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1939.120770][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1939.262101][T17596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1939.277224][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1939.277250][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1939.369109][T17596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1939.403853][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.403962][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1939.440126][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.440239][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1939.640320][T17426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1939.876214][T17426] veth0_vlan: entered promiscuous mode [ 1939.929362][T17426] veth1_vlan: entered promiscuous mode [ 1940.034485][T17426] veth0_macvtap: entered promiscuous mode [ 1940.050300][T17426] veth1_macvtap: entered promiscuous mode [ 1940.152108][T17426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1940.185267][T17426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1940.248558][ T1005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.248616][ T1005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.248660][ T1005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.271637][T17529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1940.273004][ T1005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.506611][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.506637][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.593619][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.593646][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1942.760817][T17529] veth0_vlan: entered promiscuous mode [ 1942.801717][T17596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1942.809400][T17529] veth1_vlan: entered promiscuous mode [ 1942.968638][T17529] veth0_macvtap: entered promiscuous mode [ 1942.992530][T17529] veth1_macvtap: entered promiscuous mode [ 1943.065238][T17529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1943.095243][T17529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1943.185137][T13860] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.261938][ T8749] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.275043][ T3318] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.275432][ T3318] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.422112][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1943.422660][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1943.552107][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1943.552133][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1943.936251][T17596] veth0_vlan: entered promiscuous mode [ 1943.955480][T17596] veth1_vlan: entered promiscuous mode [ 1944.010929][T17596] veth0_macvtap: entered promiscuous mode [ 1944.024713][T17596] veth1_macvtap: entered promiscuous mode [ 1944.048980][T17596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1944.073777][T17596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1944.086881][T17814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1944.162976][ T1114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.164100][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.164149][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.164189][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.415820][ T3318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.415846][ T3318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1944.498493][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.498519][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1975.494074][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.494139][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2013.415995][T13737] Bluetooth: hci0: command 0x0406 tx timeout [ 2036.934334][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.934400][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.136431][ T8258] Bluetooth: hci3: command 0x0406 tx timeout [ 2049.263101][ T8258] Bluetooth: hci4: command 0x0406 tx timeout [ 2054.372323][T13737] Bluetooth: hci5: command 0x0406 tx timeout [ 2098.374575][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.374734][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2159.814048][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.814130][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.254068][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.254131][ T1313] ieee802154 phy1 wpan1: encryption failed: -22