last executing test programs: 7m40.357398248s ago: executing program 0 (id=1): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000}) close_range(r0, 0xffffffffffffffff, 0x0) 7m39.968641549s ago: executing program 0 (id=20): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) socket$kcm(0x2, 0x5, 0x0) 7m38.976751956s ago: executing program 0 (id=21): socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) r5 = syz_io_uring_setup(0x4329, 0x0, 0x0, &(0x7f0000000200), 0x0) epoll_create(0x6) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 7m35.88730294s ago: executing program 2 (id=29): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) 7m33.150118784s ago: executing program 2 (id=32): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write$dsp(r1, &(0x7f00000012c0), 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', 0x0, 0x0, 0x0) close_range(r2, r3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7m31.928181828s ago: executing program 2 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 7m31.031339569s ago: executing program 2 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$nl_generic(0x10, 0x3, 0x10) 7m27.831094662s ago: executing program 3 (id=41): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x24000890) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80789440, &(0x7f0000000600)={0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x97, 0x1, 0x7, 0x9}) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$HIDIOCGUCODE(r4, 0xc018480d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 7m26.185138534s ago: executing program 2 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) 7m23.450416775s ago: executing program 2 (id=46): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe(0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000000c0)={0x9, "183f3346fe8465c34135a799c14211e0643d93784f6b0d5655b1e20c30c67264c2eb1d2f89056d8124cc4cdbdd8517ffd2cd5d9416441fb28e6857455f2cd193"}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 7m23.191874091s ago: executing program 32 (id=21): socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) r5 = syz_io_uring_setup(0x4329, 0x0, 0x0, &(0x7f0000000200), 0x0) epoll_create(0x6) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 7m22.980219747s ago: executing program 3 (id=49): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 7m17.22088946s ago: executing program 3 (id=56): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 7m14.775844777s ago: executing program 3 (id=59): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7m14.157864524s ago: executing program 3 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m10.706055839s ago: executing program 3 (id=62): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902"], 0x0) shutdown(r0, 0x1) 7m6.650661444s ago: executing program 33 (id=46): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe(0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000000c0)={0x9, "183f3346fe8465c34135a799c14211e0643d93784f6b0d5655b1e20c30c67264c2eb1d2f89056d8124cc4cdbdd8517ffd2cd5d9416441fb28e6857455f2cd193"}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 6m53.650039106s ago: executing program 34 (id=62): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902"], 0x0) shutdown(r0, 0x1) 3m0.342998997s ago: executing program 4 (id=348): setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='(:^.!!\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc1000, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m56.384634816s ago: executing program 6 (id=354): madvise(&(0x7f00004be000/0x3000)=nil, 0x3000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x801, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000100)={0x0, 0xe690, 0x80, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r7, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 2m55.451018497s ago: executing program 4 (id=357): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x40, r6, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) 2m54.343162826s ago: executing program 6 (id=358): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "0011223344557c778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @desc4}, &(0x7f0000000780)={0x0, "1b699af42db92c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c49522f82f6ffcdcf860c0cadb646c435e077ecbbae7968117a70a9a1090", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000900)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011220011223344556677889c69bbccddeeff00", 0x22}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x65, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 2m50.518846329s ago: executing program 4 (id=361): unshare(0x30280) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$inet_sctp(0x2, 0x5, 0x84) flistxattr(r3, 0x0, 0x0) 2m49.352248173s ago: executing program 6 (id=363): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x8008, &(0x7f00000000c0)=ANY=[], 0xfd, 0x149, &(0x7f00000009c0)="$eJzs0EFLOkEYx/Hvurrqf/WvQUHHwMtmmFrRLUijoEMJQZeuuVGwm6IQHuveoXt76AUsnnoBZScjIYpehjfBi7Exuy7YrRcwn8vM/J55nmV2d2tgkNUiTO007GbLbLfN+tJR7WAvFuZxIOHv7GZLJRXmTxU4F2sUhjdQB17SETwsc/W0YYnzsAIGSao6nF3E1LD3H1Cd/1oGyywT9Bu5JL2suGeZa3727Rk56C0EGTOqmSArAd72NJsLMjFvBHSc8AmF/GhDrYA28TyPjqPjvkantVtxKbWocmxqgCL6Pov9wnux634Mwu/d65vrpXLSrwPXd2K9ghP//krXVQ/f+vuFvCZmiD+qTDxHAdevD5+VNKAzrtnxYOBlZvY5vYdxzRYjHxOQBaXjqP+JKWE92Gi/TpIkSZIkSZIkSZL0Jz8BAAD//wFsTrE=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) acct(0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='posixacl\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 2m45.622646866s ago: executing program 6 (id=368): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x2a6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x1000000, 0x10}}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) close(0x3) 2m44.729681497s ago: executing program 4 (id=370): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000980)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x34, 0x64, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x61, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x53, 0x30, 0x30, 0x0, 0x30, 0x30, 0x36, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x35, 0x35, 0x63, 0x62, 0x38, 0x38, 0x39, 0x31, 0x62, 0x0, 0xf, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000700)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, 0x0, r0) 2m44.199056147s ago: executing program 4 (id=373): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m42.750648256s ago: executing program 4 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaab4aaaabb08004500001400000000008990"], 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)=0x84) 2m41.519987414s ago: executing program 6 (id=377): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) 2m38.058996654s ago: executing program 6 (id=380): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0xc0205647, 0x0) landlock_restrict_self(r5, 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) close_range(r2, r3, 0x0) 2m27.339589716s ago: executing program 35 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaab4aaaabb08004500001400000000008990"], 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)=0x84) 2m21.753630023s ago: executing program 36 (id=380): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0xc0205647, 0x0) landlock_restrict_self(r5, 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) close_range(r2, r3, 0x0) 1m18.717368458s ago: executing program 9 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000060900010073797a061924ab0038000480340001800c0001007061796c6f61640024000280080005400000001208000340000000b70800044000000021081d0240000000020900020073797a3200000003000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) 37.427436322s ago: executing program 1 (id=515): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) pipe(0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 34.814131352s ago: executing program 1 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 23.427517343s ago: executing program 1 (id=529): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x22, &(0x7f0000001840)=""/4085}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@host, 0x9}, @host, 0x8, 0x9, 0x5, 0x100}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22.821394279s ago: executing program 7 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0', 0xc) 20.013340227s ago: executing program 1 (id=533): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r1) 19.687826447s ago: executing program 8 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 18.370274251s ago: executing program 7 (id=535): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) write(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) shutdown(r2, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/67) 17.203100619s ago: executing program 8 (id=536): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) 17.104501612s ago: executing program 1 (id=538): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r3, 0x3, 0x1, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000003c0)=[0x0]}, 0x40) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) timer_create(0x0, &(0x7f0000000040)={0x0, 0x3f, 0x0, @tid=r1}, &(0x7f0000000080)) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 15.880455821s ago: executing program 8 (id=539): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) 14.389372566s ago: executing program 7 (id=540): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000005) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = getpgrp(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}}, 0x0, 0x2a}, 0x28) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 13.933896684s ago: executing program 5 (id=541): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 13.714262386s ago: executing program 1 (id=542): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x61, 0x39, 0x65, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000480)={0x1, 0x0, @d}, 0x18, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 13.162338969s ago: executing program 8 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 12.001856825s ago: executing program 7 (id=544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) getrlimit(0x2, &(0x7f0000000900)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffff9c, &(0x7f0000000300), 0x4441, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) symlink(0x0, 0x0) 8.876539403s ago: executing program 8 (id=545): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl(0xffffffffffffffff, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 8.3388021s ago: executing program 5 (id=546): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.328852202s ago: executing program 7 (id=547): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6.68123842s ago: executing program 5 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0xc34, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044815}, 0x24044850) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.541428725s ago: executing program 5 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write$vga_arbiter(r3, &(0x7f0000000240), 0xf) 2.988921627s ago: executing program 5 (id=550): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') timer_settime(0x0, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9e9d1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 2.972865836s ago: executing program 7 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) write(r1, &(0x7f0000000300)='vidtv.0', 0x7) 2.218523626s ago: executing program 8 (id=552): r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, 0xffffffffffffffff, &(0x7f0000000040)="c292dfb4929a", 0x6, 0x7, 0x0, 0x2}]) 0s ago: executing program 5 (id=553): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x2a6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x1000000, 0x10}}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) close(0x3) kernel console output (not intermixed with test programs): the performance. Setting the MTU to 1532 would solve the problem. [ 106.046424][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.086432][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.093603][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.119885][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.156417][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.163954][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.190363][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.217897][ T5610] team0: Port device team_slave_0 added [ 106.238117][ T5612] team0: Port device team_slave_0 added [ 106.268945][ T5612] team0: Port device team_slave_1 added [ 106.281255][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.289619][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.317105][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.333261][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.341090][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.367458][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.396828][ T5610] team0: Port device team_slave_1 added [ 106.449202][ T5608] hsr_slave_0: entered promiscuous mode [ 106.456575][ T5608] hsr_slave_1: entered promiscuous mode [ 106.532269][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.539688][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.566082][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.622844][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.630533][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.656896][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.670457][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.677687][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.703910][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.752863][ T5607] hsr_slave_0: entered promiscuous mode [ 106.759718][ T5607] hsr_slave_1: entered promiscuous mode [ 106.766443][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 106.772292][ T5607] Cannot create hsr debugfs directory [ 106.795042][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.802235][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.828694][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.857929][ T5611] hsr_slave_0: entered promiscuous mode [ 106.865572][ T5611] hsr_slave_1: entered promiscuous mode [ 106.871951][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 106.877812][ T5611] Cannot create hsr debugfs directory [ 106.915404][ T5609] hsr_slave_0: entered promiscuous mode [ 106.922105][ T5609] hsr_slave_1: entered promiscuous mode [ 106.928882][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 106.934673][ T5609] Cannot create hsr debugfs directory [ 107.184444][ T5612] hsr_slave_0: entered promiscuous mode [ 107.191492][ T5612] hsr_slave_1: entered promiscuous mode [ 107.198359][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 107.204146][ T5612] Cannot create hsr debugfs directory [ 107.217184][ T5610] hsr_slave_0: entered promiscuous mode [ 107.224242][ T5610] hsr_slave_1: entered promiscuous mode [ 107.230798][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 107.236653][ T5610] Cannot create hsr debugfs directory [ 107.615482][ T5619] Bluetooth: hci2: command tx timeout [ 107.696164][ T5624] Bluetooth: hci1: command tx timeout [ 107.701691][ T5618] Bluetooth: hci3: command tx timeout [ 107.707414][ T5626] Bluetooth: hci4: command tx timeout [ 107.712884][ T51] Bluetooth: hci0: command tx timeout [ 107.718659][ T5619] Bluetooth: hci5: command tx timeout [ 107.948135][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.964779][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.974579][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.988192][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.012246][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.026941][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.058600][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.069744][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.149604][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.167235][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.182832][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.196356][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.207348][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.219195][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.246335][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.261136][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.390870][ T5609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.405232][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.413480][ T5609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.426418][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.436024][ T5609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.448583][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.457172][ T5609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.469773][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.620173][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.635154][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.650750][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.662444][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.672144][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.682946][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.703377][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.720441][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.899359][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.919200][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.930413][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.952616][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.964125][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.973029][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.983849][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.996446][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.019979][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.031973][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.162341][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.192656][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.262470][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.270904][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.282223][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.289395][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.303375][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.315680][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.333219][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.349913][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.357178][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.378119][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.393624][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.403014][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.414787][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.423717][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.436041][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.449625][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.456947][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.612822][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.638217][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.679833][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.687060][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.699360][ T5619] Bluetooth: hci2: command tx timeout [ 109.774139][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.781426][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.789229][ T5619] Bluetooth: hci5: command tx timeout [ 109.790719][ T5624] Bluetooth: hci1: command tx timeout [ 109.795392][ T5619] Bluetooth: hci3: command tx timeout [ 109.800247][ T5618] Bluetooth: hci0: command tx timeout [ 109.800298][ T5618] Bluetooth: hci4: command tx timeout [ 109.860275][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.941242][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.948614][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.043244][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.050548][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.142815][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.229571][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.336342][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.372139][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.445895][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.453187][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.484212][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.491626][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.577120][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.584465][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.618517][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.625900][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.263590][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.598714][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.736973][ T5607] veth0_vlan: entered promiscuous mode [ 111.796643][ T5607] veth1_vlan: entered promiscuous mode [ 112.051958][ T5608] veth0_vlan: entered promiscuous mode [ 112.090939][ T5607] veth0_macvtap: entered promiscuous mode [ 112.130297][ T5607] veth1_macvtap: entered promiscuous mode [ 112.191738][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.232520][ T5608] veth1_vlan: entered promiscuous mode [ 112.291976][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.352729][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.614918][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.623912][ T5608] veth0_macvtap: entered promiscuous mode [ 112.682173][ T5608] veth1_macvtap: entered promiscuous mode [ 112.825116][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.878223][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.968271][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.068441][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.071550][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.086181][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.099366][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.148172][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.245912][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.256003][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.266788][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.517582][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.528383][ T5609] veth0_vlan: entered promiscuous mode [ 113.590928][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.610538][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.690935][ T5609] veth1_vlan: entered promiscuous mode [ 113.716539][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.741913][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.767576][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.803095][ T5610] veth0_vlan: entered promiscuous mode [ 113.827558][ T1090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.856621][ T5612] veth0_vlan: entered promiscuous mode [ 113.869535][ T5610] veth1_vlan: entered promiscuous mode [ 113.939151][ T5612] veth1_vlan: entered promiscuous mode [ 114.007191][ T5609] veth0_macvtap: entered promiscuous mode [ 114.055488][ T1090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.095809][ T5612] veth0_macvtap: entered promiscuous mode [ 114.109129][ T5609] veth1_macvtap: entered promiscuous mode [ 114.148747][ T5612] veth1_macvtap: entered promiscuous mode [ 114.314852][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.827865][ T1090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.878329][ T5610] veth0_macvtap: entered promiscuous mode [ 114.968734][ T5611] veth0_vlan: entered promiscuous mode [ 115.018938][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.066913][ T5610] veth1_macvtap: entered promiscuous mode [ 115.105442][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.123439][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.267545][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.308660][ T5763] hsr0: entered promiscuous mode [ 115.362578][ T5611] veth1_vlan: entered promiscuous mode [ 115.472434][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.638414][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.990609][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.045803][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.086748][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.170395][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.265304][ T1090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.289399][ T5862] Config c/1 of g1 needs at least one function. [ 116.306841][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.313003][ T5862] udc dummy_udc.0: failed to start g1: -22 [ 116.322910][ T5862] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 116.346700][ T5862] UDC core: g1: couldn't find an available UDC or it's busy [ 116.485328][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.518925][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.666235][ T5611] veth0_macvtap: entered promiscuous mode [ 117.565916][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.598523][ T5611] veth1_macvtap: entered promiscuous mode [ 117.734550][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.824493][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.874966][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.135139][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.155426][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.196428][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.729988][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.821219][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.867174][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.521723][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.944882][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.954912][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.928216][ T1100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.985835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.032746][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.243406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.522007][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.701576][ T5904] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 123.717684][ T5904] batman_adv: batadv0: Adding interface: gretap1 [ 123.724101][ T5904] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.751410][ T5904] batman_adv: batadv0: Interface activated: gretap1 [ 123.764030][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.779025][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.862468][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.900025][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.986728][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.033995][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.242818][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.268094][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.364638][ T5911] tipc: Started in network mode [ 124.373753][ T5917] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 124.385653][ T5911] tipc: Node identity 5ee38f1d55da, cluster identity 4711 [ 124.396018][ T5911] tipc: Enabled bearer , priority 0 [ 124.413289][ T5914] syzkaller0: entered promiscuous mode [ 124.432000][ T5914] syzkaller0: entered allmulticast mode [ 124.711510][ T5923] CIFS: Attempting to mount //127.0.0.1/share [ 124.850668][ T5926] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 124.863094][ T5923] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 124.873848][ T5923] CIFS: VFS: cifs_mount failed w/return code = -11 [ 125.700754][ T5921] tipc: Resetting bearer [ 125.809082][ T5910] tipc: Resetting bearer [ 126.856524][ T5943] loop3: detected capacity change from 0 to 4096 [ 126.866783][ T5943] ======================================================= [ 126.866783][ T5943] WARNING: The mand mount option has been deprecated and [ 126.866783][ T5943] and is ignored by this kernel. Remove the mand [ 126.866783][ T5943] option from the mount to silence this warning. [ 126.866783][ T5943] ======================================================= [ 126.906720][ T5943] ntfs3: Unknown parameter 'ntfs3' [ 127.274127][ T5910] tipc: Disabling bearer [ 128.379901][ T5772] tipc: Node number set to 188321565 [ 132.664898][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.675124][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.703734][ T5988] jffs2: notice: (5988) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.409407][ T5998] loop3: detected capacity change from 0 to 32768 [ 133.855436][ T5998] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 133.925140][ T5998] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.032973][ T5998] XFS (loop3): Ending clean mount [ 135.056290][ T5998] XFS (loop3): Quotacheck needed: Please wait. [ 135.615674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.628293][ T6017] Bluetooth: MGMT ver 1.23 [ 136.667607][ T5998] XFS (loop3): Quotacheck: Done. [ 136.756751][ T5608] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.536069][ T6038] loop4: detected capacity change from 0 to 32768 [ 139.094922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 141.172755][ T6038] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 141.227199][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 141.264787][ T5742] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 141.710065][ T5611] ocfs2: Unmounting device (7,4) on (node local) [ 144.860131][ T6061] loop4: detected capacity change from 0 to 32768 [ 144.894256][ T6061] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.964808][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.980123][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.992053][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.008803][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.024807][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.253788][ T6061] XFS (loop4): Ending clean mount [ 145.272241][ T6061] XFS (loop4): Quotacheck needed: Please wait. [ 146.187425][ T6061] XFS (loop4): Quotacheck: Done. [ 147.242295][ T5611] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.632596][ T6090] loop5: detected capacity change from 0 to 512 [ 147.656151][ T6090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.776426][ T6090] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 148.028845][ T51] Bluetooth: hci6: command tx timeout [ 148.384195][ T6090] EXT4-fs (loop5): 1 truncate cleaned up [ 148.434711][ T6090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.722871][ T5609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.799273][ T6099] netlink: 256 bytes leftover after parsing attributes in process `syz.1.57'. [ 149.951558][ T6100] syz.1.57 uses obsolete (PF_INET,SOCK_PACKET) [ 150.086887][ T6099] unsupported nlmsg_type 40 [ 150.104599][ T51] Bluetooth: hci6: command tx timeout [ 150.133596][ T6104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.57'. [ 150.377647][ T6107] process 'syz.5.58' launched './file0' with NULL argv: empty string added [ 153.575611][ T51] Bluetooth: hci6: command tx timeout [ 153.801998][ T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.864546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 155.274910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 155.874632][ T51] Bluetooth: hci6: command tx timeout [ 158.163863][ T6140] loop1: detected capacity change from 0 to 128 [ 158.203213][ T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.816018][ T6145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.221755][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.250315][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.260976][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.279445][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.290192][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.098703][ T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.334715][ T51] Bluetooth: hci5: command tx timeout [ 164.414658][ T51] Bluetooth: hci5: command tx timeout [ 164.630652][ T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.682716][ T6172] xt_hashlimit: size too large, truncated to 1048576 [ 166.494483][ T51] Bluetooth: hci5: command tx timeout [ 166.711161][ T6209] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 167.964793][ T5620] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 168.487298][ T5620] usb 4-1: Using ep0 maxpacket: 8 [ 168.638354][ T51] Bluetooth: hci5: command tx timeout [ 168.715434][ T5620] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 168.803467][ T5620] usb 4-1: config 0 has no interfaces? [ 168.855387][ T5620] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 168.902694][ T5620] usb 4-1: Product: syz [ 168.914976][ T142] bridge_slave_1: left allmulticast mode [ 168.929365][ T5620] usb 4-1: Manufacturer: syz [ 168.949425][ T5620] usb 4-1: SerialNumber: syz [ 168.957439][ T142] bridge_slave_1: left promiscuous mode [ 168.981510][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.051188][ T5620] usb 4-1: config 0 descriptor?? [ 170.620854][ T142] bridge_slave_0: left allmulticast mode [ 170.626945][ T142] bridge_slave_0: left promiscuous mode [ 170.638556][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.825726][ T5620] usb 4-1: USB disconnect, device number 2 [ 174.314201][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.341666][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.356126][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.371638][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.381422][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.742731][ T6256] loop4: detected capacity change from 0 to 32768 [ 175.750994][ T6256] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 175.767783][ T6256] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.87 (6256) [ 175.822930][ T6256] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.833426][ T6256] BTRFS info (device loop4): using crc32c checksum algorithm [ 175.953779][ T6244] loop5: detected capacity change from 0 to 32768 [ 176.174583][ T6244] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop5": -EINTR [ 176.329428][ T6256] BTRFS info (device loop4): rebuilding free space tree [ 176.508075][ T51] Bluetooth: hci4: command tx timeout [ 176.926050][ T6256] BTRFS info (device loop4): disabling free space tree [ 176.933277][ T6256] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.943500][ T6256] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.979855][ T6256] BTRFS info (device loop4): enabling ssd optimizations [ 176.989394][ T6256] BTRFS info (device loop4): turning on async discard [ 176.996368][ T6256] BTRFS info (device loop4): force clearing of disk cache [ 177.003594][ T6256] BTRFS info (device loop4): use zstd compression, level 3 [ 177.247900][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.619867][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.386222][ T142] bond0 (unregistering): Released all slaves [ 178.584522][ T51] Bluetooth: hci4: command tx timeout [ 179.694338][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.702504][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.804712][ T6063] bridge_slave_0: entered allmulticast mode [ 179.869207][ T6063] bridge_slave_0: entered promiscuous mode [ 179.928370][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.974160][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.006492][ T6063] bridge_slave_1: entered allmulticast mode [ 180.033911][ T6063] bridge_slave_1: entered promiscuous mode [ 180.394039][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 180.450447][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 180.660759][ T51] Bluetooth: hci4: command tx timeout [ 181.673781][ T5611] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 182.570863][ T6315] loop5: detected capacity change from 0 to 32768 [ 182.640620][ T6315] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.734658][ T51] Bluetooth: hci4: command tx timeout [ 183.576324][ T6315] XFS (loop5): Ending clean mount [ 183.606472][ T6315] XFS (loop5): Quotacheck needed: Please wait. [ 185.035293][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.506141][ T6315] XFS (loop5): Quotacheck: Done. [ 185.726862][ T5609] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.884984][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.757598][ T6365] loop5: detected capacity change from 0 to 40427 [ 187.783083][ T6365] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 187.789866][ T6365] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 187.809223][ T6365] F2FS-fs (loop5): invalid crc value [ 187.932042][ T6365] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 187.968150][ T6365] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 187.977668][ T6365] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 188.793742][ T6373] syz.5.97: attempt to access beyond end of device [ 188.793742][ T6373] loop5: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 189.401064][ T5609] syz-executor: attempt to access beyond end of device [ 189.401064][ T5609] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.542384][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 189.542435][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 189.542457][ T5609] Call Trace: [ 189.542469][ T5609] [ 189.542486][ T5609] dump_stack_lvl+0x100/0x190 [ 189.542559][ T5609] f2fs_stop_checkpoint+0x5e6/0xb30 [ 189.542611][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.542661][ T5609] ? errseq_set+0xe3/0x150 [ 189.542708][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.542762][ T5609] f2fs_write_end_bio+0xef9/0x12d0 [ 189.542821][ T5609] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 189.542880][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.542936][ T5609] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 189.542989][ T5609] bio_endio+0x7ba/0x9c0 [ 189.543056][ T5609] submit_bio_noacct+0x22a/0x2130 [ 189.543116][ T5609] f2fs_submit_write_bio+0x133/0x330 [ 189.543165][ T5609] __submit_merged_bio+0x330/0x7b0 [ 189.543217][ T5609] ? rcu_is_watching+0x13/0xc0 [ 189.543266][ T5609] __submit_merged_write_cond+0x3fe/0x510 [ 189.543330][ T5609] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 189.543395][ T5609] ? __pfx___might_resched+0x10/0x10 [ 189.543453][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.543501][ T5609] ? folio_clear_dirty_for_io+0x178/0x960 [ 189.543557][ T5609] f2fs_write_cache_pages+0x20e9/0x2630 [ 189.543645][ T5609] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 189.543712][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.543761][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.543809][ T5609] ? __bfs+0x150/0x2a0 [ 189.543938][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.543990][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.544036][ T5609] ? rcu_is_watching+0x13/0xc0 [ 189.544078][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.544123][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.544170][ T5609] ? rcu_is_watching+0x13/0xc0 [ 189.544217][ T5609] f2fs_write_data_pages+0x799/0x16d0 [ 189.544295][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 189.544400][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 189.544465][ T5609] do_writepages+0x278/0x600 [ 189.544527][ T5609] ? __pfx_do_writepages+0x10/0x10 [ 189.544741][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.544813][ T5609] ? _raw_spin_unlock+0x3e/0x50 [ 189.544858][ T5609] filemap_writeback+0x22d/0x2e0 [ 189.544908][ T5609] ? __pfx_filemap_writeback+0x10/0x10 [ 189.544948][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.545042][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.545087][ T5609] ? find_held_lock+0x2b/0x80 [ 189.545132][ T5609] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 189.545192][ T5609] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 189.545249][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.545306][ T5609] f2fs_sync_dirty_inodes+0x46a/0x970 [ 189.545386][ T5609] block_operations+0x2a6/0xfc0 [ 189.545477][ T5609] ? __pfx_block_operations+0x10/0x10 [ 189.545588][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.545635][ T5609] ? ktime_get+0x22c/0x320 [ 189.545690][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.545732][ T5609] ? rcu_is_watching+0x13/0xc0 [ 189.545778][ T5609] f2fs_write_checkpoint+0x58b/0x53d0 [ 189.545842][ T5609] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.545886][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.545928][ T5609] ? _raw_spin_unlock_irq+0x2e/0x50 [ 189.545966][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.546011][ T5609] ? __wait_for_common+0x1f3/0x4c0 [ 189.546059][ T5609] ? __pfx_schedule_timeout+0x10/0x10 [ 189.546131][ T5609] ? __pfx___wait_for_common+0x10/0x10 [ 189.546178][ T5609] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 189.546239][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.546293][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.546338][ T5609] ? rcu_is_watching+0x13/0xc0 [ 189.546377][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.546436][ T5609] ? kthread_stop+0x280/0x630 [ 189.546485][ T5609] kill_f2fs_super+0x3f1/0x4a0 [ 189.546549][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 189.546631][ T5609] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.546680][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.546727][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.546788][ T5609] deactivate_locked_super+0xbd/0x140 [ 189.546830][ T5609] deactivate_super+0xea/0x110 [ 189.546872][ T5609] cleanup_mnt+0x21f/0x450 [ 189.546924][ T5609] task_work_run+0x150/0x240 [ 189.546978][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 189.547032][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.547088][ T5609] exit_to_user_mode_loop+0x1d8/0x700 [ 189.547152][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.547198][ T5609] ? rcu_is_watching+0x13/0xc0 [ 189.547244][ T5609] do_syscall_64+0x661/0x790 [ 189.547298][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.547338][ T5609] RIP: 0033:0x7f3b1f59f317 [ 189.547370][ T5609] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 189.547401][ T5609] RSP: 002b:00007ffedcc4dd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 189.547444][ T5609] RAX: 0000000000000000 RBX: 00007f3b1f634474 RCX: 00007f3b1f59f317 [ 189.547463][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedcc4dde0 [ 189.547482][ T5609] RBP: 00007ffedcc4dde0 R08: 00007ffedcc4ede0 R09: 00000000ffffffff [ 189.547502][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedcc4ee70 [ 189.547521][ T5609] R13: 00007f3b1f634474 R14: 000000000002e013 R15: 00007ffedcc4eeb0 [ 189.547562][ T5609] [ 190.281366][ T6063] team0: Port device team_slave_0 added [ 190.310090][ T6063] team0: Port device team_slave_1 added [ 190.317807][ T5609] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 190.484013][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.830648][ T142] hsr_slave_0: left promiscuous mode [ 190.864085][ T142] hsr_slave_1: left promiscuous mode [ 190.886702][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.906670][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.937246][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.955745][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.824575][ T142] veth1_macvtap: left promiscuous mode [ 191.836205][ T142] veth0_macvtap: left promiscuous mode [ 191.853356][ T142] veth1_vlan: left promiscuous mode [ 191.858977][ T142] veth0_vlan: left promiscuous mode [ 192.153727][ T6388] nbd0: detected capacity change from 0 to 63 [ 194.138094][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.244584][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.685442][ T51] block nbd0: Receive control failed (result -104) [ 197.592276][ T6409] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 197.599245][ T6409] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.657336][ T6409] vhci_hcd vhci_hcd.0: Device attached [ 197.706785][ T6409] netlink: 48 bytes leftover after parsing attributes in process `syz.4.107'. [ 197.713450][ T6410] vhci_hcd: cannot find the pending unlink 4096 [ 197.836744][ T5742] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 197.916661][ T5742] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 197.929284][ T142] team0 (unregistering): Port device team_slave_1 removed [ 198.002446][ T142] team0 (unregistering): Port device team_slave_0 removed [ 198.836144][ T6410] vhci_hcd: connection reset by peer [ 198.854611][ T59] vhci_hcd vhci_hcd.4: stop threads [ 198.862093][ T59] vhci_hcd vhci_hcd.4: release socket [ 198.873062][ T59] vhci_hcd vhci_hcd.4: disconnect device [ 202.531413][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.305462][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.420444][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.514592][ T5742] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 203.773122][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.791483][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.949578][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.033098][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.066538][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.483395][ T6420] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 204.495748][ T6420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 204.505551][ T6420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 204.588507][ T30] audit: type=1800 audit(1787585247.865:2): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.108" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 206.312606][ T5619] Bluetooth: hci1: command tx timeout [ 208.334580][ T5619] Bluetooth: hci1: command tx timeout [ 210.414477][ T5619] Bluetooth: hci1: command tx timeout [ 210.761809][ T6510] loop1: detected capacity change from 0 to 256 [ 210.801954][ T6512] netlink: 36 bytes leftover after parsing attributes in process `syz.5.122'. [ 210.809715][ T6510] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 210.931464][ T6511] sctp: [Deprecated]: syz.5.122 (pid 6511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.931464][ T6511] Use struct sctp_sack_info instead [ 210.932451][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.089596][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.114269][ T6148] bridge_slave_0: entered allmulticast mode [ 211.153447][ T6148] bridge_slave_0: entered promiscuous mode [ 211.197007][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.217409][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.236284][ T6148] bridge_slave_1: entered allmulticast mode [ 211.257069][ T6148] bridge_slave_1: entered promiscuous mode [ 212.829230][ T6524] netlink: 48 bytes leftover after parsing attributes in process `syz.1.124'. [ 213.334783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 213.744440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 214.098875][ T5619] Bluetooth: hci1: command tx timeout [ 214.623578][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.301701][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 215.472477][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.949399][ T142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.155650][ T6550] loop4: detected capacity change from 0 to 256 [ 216.550649][ T6148] team0: Port device team_slave_0 added [ 216.598644][ T6546] syzkaller0: entered promiscuous mode [ 216.607421][ T6546] syzkaller0: entered allmulticast mode [ 216.667868][ T6148] team0: Port device team_slave_1 added [ 216.841944][ T142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.999873][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.024780][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.034080][ T6249] bridge_slave_0: entered allmulticast mode [ 217.043564][ T6249] bridge_slave_0: entered promiscuous mode [ 217.095656][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.106075][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.113487][ T6249] bridge_slave_1: entered allmulticast mode [ 217.126788][ T6249] bridge_slave_1: entered promiscuous mode [ 217.239367][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.247981][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.312996][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.134997][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.223268][ T142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.303676][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.321307][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.359533][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.435271][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.839811][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.853373][ T142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.854082][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.882597][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.898474][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.906682][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.272875][ T6249] team0: Port device team_slave_0 added [ 222.211604][ T5619] Bluetooth: hci5: command tx timeout [ 222.599618][ T6249] team0: Port device team_slave_1 added [ 224.074097][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 30 seconds [ 224.099692][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 30 seconds [ 224.111230][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 30 seconds [ 224.122413][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 30 seconds [ 224.165849][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.354403][ T5619] Bluetooth: hci5: command tx timeout [ 224.794634][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.936952][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.414324][ T5626] Bluetooth: hci5: command tx timeout [ 226.591260][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.633918][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.756415][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.894336][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 226.894501][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 226.902521][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 228.169799][ T6249] hsr_slave_0: entered promiscuous mode [ 228.212505][ T6249] hsr_slave_1: entered promiscuous mode [ 228.244400][ T6249] debugfs: 'hsr0' already exists in 'hsr' [ 228.274355][ T6249] Cannot create hsr debugfs directory [ 228.430875][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 228.494784][ T5624] Bluetooth: hci5: command tx timeout [ 228.519152][ T6634] mmap: syz.1.140 (6634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 231.950804][ T142] bridge_slave_1: left allmulticast mode [ 231.966523][ T142] bridge_slave_1: left promiscuous mode [ 231.991234][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.036186][ T142] bridge_slave_0: left allmulticast mode [ 232.041944][ T142] bridge_slave_0: left promiscuous mode [ 232.056113][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.134496][ T142] bridge_slave_1: left allmulticast mode [ 232.155046][ T142] bridge_slave_1: left promiscuous mode [ 232.181132][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.427444][ T142] bridge_slave_0: left allmulticast mode [ 232.433467][ T142] bridge_slave_0: left promiscuous mode [ 232.454399][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.568284][ T6658] loop4: detected capacity change from 0 to 8192 [ 233.614821][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.628116][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.637109][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.660926][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.672873][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.049852][ T6658] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.796653][ T5624] Bluetooth: hci6: command tx timeout [ 236.685115][ T6681] loop4: detected capacity change from 0 to 8 [ 237.366556][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.534171][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.737574][ T142] bond0 (unregistering): Released all slaves [ 238.330791][ T5624] Bluetooth: hci6: command tx timeout [ 240.414068][ T51] Bluetooth: hci6: command tx timeout [ 240.543047][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.599438][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.661434][ T142] bond0 (unregistering): Released all slaves [ 242.493869][ T51] Bluetooth: hci6: command tx timeout [ 242.596481][ T6719] loop1: detected capacity change from 0 to 256 [ 242.720667][ T6719] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 242.946106][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.015146][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.501597][ T6444] bridge_slave_0: entered allmulticast mode [ 243.665083][ T6444] bridge_slave_0: entered promiscuous mode [ 244.216906][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.243871][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.264453][ T6444] bridge_slave_1: entered allmulticast mode [ 244.278605][ T6444] bridge_slave_1: entered promiscuous mode [ 244.304750][ T51] block nbd1: Receive control failed (result -32) [ 244.304750][ T5624] block nbd1: Receive control failed (result -32) [ 244.705245][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.901602][ T142] hsr_slave_0: left promiscuous mode [ 244.952830][ T142] hsr_slave_1: left promiscuous mode [ 245.346299][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.773797][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.851007][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.898177][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.006013][ T142] veth1_macvtap: left promiscuous mode [ 246.022227][ T142] veth0_macvtap: left promiscuous mode [ 246.036325][ T142] veth1_vlan: left promiscuous mode [ 246.053709][ T142] veth0_vlan: left promiscuous mode [ 247.449621][ T142] team0 (unregistering): Port device team_slave_1 removed [ 247.478579][ T6771] Zero length message leads to an empty skb [ 247.486235][ T142] team0 (unregistering): Port device team_slave_0 removed [ 247.494474][ T51] Bluetooth: hci2: unexpected event for opcode 0x0025 [ 248.056487][ T142] team0 (unregistering): Port device team_slave_1 removed [ 248.090206][ T142] team0 (unregistering): Port device team_slave_0 removed [ 249.366485][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 249.401377][ T6768] netlink: 'syz.1.164': attribute type 3 has an invalid length. [ 249.452326][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.525014][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.834234][ T6444] team0: Port device team_slave_0 added [ 251.332091][ T6444] team0: Port device team_slave_1 added [ 251.591380][ T6794] loop1: detected capacity change from 0 to 2048 [ 251.683707][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.747605][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.912789][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.006515][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.085940][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.230585][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.815483][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 60 seconds [ 254.826419][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 60 seconds [ 254.837621][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 60 seconds [ 254.849427][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 60 seconds [ 255.159119][ T6444] hsr_slave_0: entered promiscuous mode [ 255.191326][ T6444] hsr_slave_1: entered promiscuous mode [ 255.211691][ T6444] debugfs: 'hsr0' already exists in 'hsr' [ 255.253201][ T6444] Cannot create hsr debugfs directory [ 255.535525][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.545885][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.676484][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.708204][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.740272][ T6578] bridge_slave_0: entered allmulticast mode [ 259.782181][ T6578] bridge_slave_0: entered promiscuous mode [ 259.818471][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.836843][ T6856] loop1: detected capacity change from 0 to 256 [ 259.840016][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.869128][ T6578] bridge_slave_1: entered allmulticast mode [ 259.890544][ T6578] bridge_slave_1: entered promiscuous mode [ 259.893970][ T6858] loop5: detected capacity change from 0 to 512 [ 260.430846][ T6860] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 260.443147][ T6860] FAT-fs (loop1): Filesystem has been set read-only [ 260.449941][ T6860] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 260.461258][ T6860] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 260.478065][ T6860] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 260.527987][ T30] audit: type=1800 audit(1787585303.868:3): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.180" name="file1" dev="loop1" ino=1048611 res=0 errno=0 [ 261.346234][ T6862] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5609] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[6862] [ 261.899156][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 262.060239][ T6866] loop1: detected capacity change from 0 to 64 [ 263.560820][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.577114][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.588352][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.603137][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.614161][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.892416][ T142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.317729][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.440369][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.692048][ T5624] Bluetooth: hci4: command tx timeout [ 266.267847][ T6890] tipc: Enabling of bearer rejected, failed to enable media [ 267.781950][ T5624] Bluetooth: hci4: command tx timeout [ 267.854680][ T6919] ubi0: attaching mtd0 [ 267.893201][ T6919] ubi0: scanning is finished [ 267.898475][ T6919] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 268.433206][ T142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.505275][ T6919] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 268.637491][ T6918] netlink: 'syz.5.189': attribute type 2 has an invalid length. [ 268.638766][ T6921] Bluetooth: ISO socket layer initialized [ 268.800582][ T6578] team0: Port device team_slave_0 added [ 268.946196][ T142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.027572][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.051428][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.061941][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 269.092440][ T6664] bridge_slave_0: entered allmulticast mode [ 269.114410][ T6664] bridge_slave_0: entered promiscuous mode [ 269.156255][ T6578] team0: Port device team_slave_1 added [ 269.182081][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.215856][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.238765][ T6664] bridge_slave_1: entered allmulticast mode [ 269.345751][ T6664] bridge_slave_1: entered promiscuous mode [ 269.361974][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 269.623740][ T6933] loop1: detected capacity change from 0 to 2048 [ 269.876954][ T5624] Bluetooth: hci4: command tx timeout [ 270.521314][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.531353][ T9] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 270.541242][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.596993][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 270.659509][ T142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.936445][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.022957][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.053217][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.077527][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.128765][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.414081][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.444942][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.931734][ T5624] Bluetooth: hci4: command tx timeout [ 272.061969][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.191'. [ 272.291269][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.913966][ T6954] IPVS: sh: FWM 3 0x00000003 - no destination available [ 272.921564][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 272.950155][ T6954] IPVS: sh: FWM 3 0x00000003 - no destination available [ 272.957540][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 273.671849][ T49] IPVS: starting estimator thread 0... [ 273.718768][ T9] usb 5-1: USB disconnect, device number 2 [ 275.623969][ T6955] IPVS: using max 22 ests per chain, 52800 per kthread [ 276.994229][ T6664] team0: Port device team_slave_0 added [ 277.052219][ T6664] team0: Port device team_slave_1 added [ 278.703035][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.721302][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.129505][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.653085][ T6983] netlink: 'syz.5.201': attribute type 2 has an invalid length. [ 280.301412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 280.429327][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.480041][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.642830][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.858757][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.895936][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.921331][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.002162][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.023675][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.851059][ T5624] Bluetooth: hci1: command tx timeout [ 285.178574][ T142] bridge_slave_1: left allmulticast mode [ 285.207337][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 90 seconds [ 285.220636][ T142] bridge_slave_1: left promiscuous mode [ 285.220862][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 90 seconds [ 285.247964][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 90 seconds [ 285.259913][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 90 seconds [ 285.288570][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.592417][ T142] bridge_slave_0: left allmulticast mode [ 286.035702][ T5624] Bluetooth: hci1: command tx timeout [ 286.375093][ T142] bridge_slave_0: left promiscuous mode [ 286.404172][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.598317][ T142] bridge_slave_1: left allmulticast mode [ 286.608173][ T142] bridge_slave_1: left promiscuous mode [ 286.623074][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.655215][ T142] bridge_slave_0: left allmulticast mode [ 286.668286][ T142] bridge_slave_0: left promiscuous mode [ 286.681606][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.864462][ T142] bridge_slave_1: left allmulticast mode [ 286.876148][ T142] bridge_slave_1: left promiscuous mode [ 286.890217][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.933541][ T142] bridge_slave_0: left allmulticast mode [ 286.962144][ T142] bridge_slave_0: left promiscuous mode [ 286.987287][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.144280][ T5624] Bluetooth: hci1: command tx timeout [ 289.872892][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.961202][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.031559][ T142] bond0 (unregistering): Released all slaves [ 290.170735][ T5624] Bluetooth: hci1: command tx timeout [ 291.114194][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.381807][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.402875][ T142] bond0 (unregistering): Released all slaves [ 292.575060][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.672954][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.703082][ T142] bond0 (unregistering): Released all slaves [ 292.770531][ T6664] hsr_slave_0: entered promiscuous mode [ 292.794994][ T6664] hsr_slave_1: entered promiscuous mode [ 292.812058][ T6664] debugfs: 'hsr0' already exists in 'hsr' [ 292.822478][ T6664] Cannot create hsr debugfs directory [ 293.596960][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 293.648477][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.698835][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.715297][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.724927][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.744417][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.269077][ T7079] overlayfs: overlapping lowerdir path [ 295.853938][ T51] Bluetooth: hci5: command tx timeout [ 297.940165][ T51] Bluetooth: hci5: command tx timeout [ 298.416232][ T7088] null_blk: nullb1: using native zone append [ 299.576352][ T12] IPVS: starting estimator thread 0... [ 300.021348][ T51] Bluetooth: hci5: command tx timeout [ 300.240224][ T7098] IPVS: using max 24 ests per chain, 57600 per kthread [ 300.458245][ T7088] null_blk: disk nullb1 created [ 300.483206][ T142] hsr_slave_0: left promiscuous mode [ 300.509216][ T142] hsr_slave_1: left promiscuous mode [ 300.536984][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.062731][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.288516][ T7111] loop4: detected capacity change from 0 to 1024 [ 301.345160][ T142] hsr_slave_0: left promiscuous mode [ 301.410498][ T142] hsr_slave_1: left promiscuous mode [ 301.445915][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.464486][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.354789][ T51] Bluetooth: hci5: command tx timeout [ 302.362989][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.396393][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.432716][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.590084][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.684441][ T142] veth1_macvtap: left promiscuous mode [ 302.708444][ T142] veth0_macvtap: left promiscuous mode [ 302.730943][ T142] veth1_vlan: left promiscuous mode [ 302.755019][ T142] veth0_vlan: left promiscuous mode [ 302.795019][ T7121] loop1: detected capacity change from 0 to 256 [ 304.392795][ T7132] loop4: detected capacity change from 0 to 128 [ 304.446341][ T7132] qnx6: superblock #1 checksum error [ 306.202479][ T7140] loop1: detected capacity change from 0 to 2048 [ 308.727541][ T142] team0 (unregistering): Port device team_slave_1 removed [ 310.646630][ T142] team0 (unregistering): Port device team_slave_0 removed [ 311.216181][ T7161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.233941][ T7173] loop1: detected capacity change from 0 to 4096 [ 313.281228][ T7173] ntfs3(loop1): Failed to load $AttrDef (-2) [ 315.118696][ T7182] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5611] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[7182] [ 315.319368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 317.148068][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.157866][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.177518][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 120 seconds [ 317.209857][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 120 seconds [ 317.221378][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 120 seconds [ 317.232590][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 120 seconds [ 317.706499][ T142] team0 (unregistering): Port device team_slave_1 removed [ 317.741072][ T142] team0 (unregistering): Port device team_slave_0 removed [ 318.033806][ T142] team0 (unregistering): Port device team_slave_1 removed [ 318.055760][ T142] team0 (unregistering): Port device team_slave_0 removed [ 318.703954][ T7196] netlink: 'syz.1.241': attribute type 2 has an invalid length. [ 322.276656][ T7228] ubi0: attaching mtd0 [ 322.284789][ T7228] ubi0: scanning is finished [ 322.291786][ T7228] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 323.124533][ T7228] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 323.294977][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.318304][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.342930][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.358923][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.367530][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.425534][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 325.507671][ T5624] Bluetooth: hci6: command tx timeout [ 325.578069][ T3100] hsr0: entered promiscuous mode [ 327.609323][ T7292] netlink: 'syz.4.256': attribute type 2 has an invalid length. [ 327.616317][ T5624] Bluetooth: hci6: command tx timeout [ 327.672982][ T6986] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.684949][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.693290][ T6986] bridge_slave_0: entered allmulticast mode [ 327.720457][ T6986] bridge_slave_0: entered promiscuous mode [ 328.029245][ T6986] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.049393][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.056760][ T6986] bridge_slave_1: entered allmulticast mode [ 328.127138][ T6986] bridge_slave_1: entered promiscuous mode [ 329.095422][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.147574][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.222100][ T7051] bridge_slave_0: entered allmulticast mode [ 329.251059][ T7051] bridge_slave_0: entered promiscuous mode [ 329.708764][ T5624] Bluetooth: hci6: command tx timeout [ 330.069578][ T7324] loop5: detected capacity change from 0 to 1024 [ 330.085965][ T142] bridge_slave_1: left allmulticast mode [ 330.118633][ T142] bridge_slave_1: left promiscuous mode [ 330.138114][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.179291][ T142] bridge_slave_0: left allmulticast mode [ 330.190212][ T142] bridge_slave_0: left promiscuous mode [ 330.204016][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.480938][ T142] bridge_slave_1: left allmulticast mode [ 330.486713][ T142] bridge_slave_1: left promiscuous mode [ 330.492710][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.503137][ T142] bridge_slave_0: left allmulticast mode [ 330.510362][ T142] bridge_slave_0: left promiscuous mode [ 330.518288][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.843645][ T142] bridge_slave_1: left allmulticast mode [ 330.855529][ T142] bridge_slave_1: left promiscuous mode [ 330.887362][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.261267][ T142] bridge_slave_0: left allmulticast mode [ 331.306622][ T142] bridge_slave_0: left promiscuous mode [ 331.327119][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.592826][ T142] bond0 (unregistering): Released all slaves [ 331.768389][ T5624] Bluetooth: hci6: command tx timeout [ 332.405545][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.425169][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.436558][ T142] bond0 (unregistering): Released all slaves [ 332.593696][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.606669][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.628854][ T142] bond0 (unregistering): Released all slaves [ 332.813815][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.842490][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.872483][ T142] bond0 (unregistering): Released all slaves [ 332.917884][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.945794][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.980200][ T7051] bridge_slave_1: entered allmulticast mode [ 333.024259][ T7051] bridge_slave_1: entered promiscuous mode [ 333.984100][ T6986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.016784][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 334.126461][ T6986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.144893][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.245502][ T142] hsr_slave_0: left promiscuous mode [ 337.644200][ T142] hsr_slave_1: left promiscuous mode [ 337.644247][ T3100] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 337.659129][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.685226][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.431407][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.439261][ T3100] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 338.451856][ T3100] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.463504][ T3100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.526549][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.534732][ T3100] usb 2-1: config 0 descriptor?? [ 338.633747][ T142] hsr_slave_0: left promiscuous mode [ 338.650015][ T3100] pwc: Askey VC010 type 2 USB webcam detected. [ 338.661496][ T142] hsr_slave_1: left promiscuous mode [ 338.685281][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.731437][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.181901][ T3100] pwc: recv_control_msg error -32 req 02 val 2b00 [ 340.054607][ T3100] pwc: recv_control_msg error -32 req 02 val 2700 [ 341.892311][ T3100] pwc: recv_control_msg error -71 req 02 val 2c00 [ 341.926776][ T3100] pwc: recv_control_msg error -71 req 04 val 1000 [ 341.983950][ T3100] pwc: recv_control_msg error -71 req 04 val 1300 [ 342.036167][ T3100] pwc: recv_control_msg error -71 req 04 val 1400 [ 342.071136][ T3100] pwc: recv_control_msg error -71 req 02 val 2000 [ 342.086890][ T142] team0 (unregistering): Port device team_slave_1 removed [ 342.104986][ T3100] pwc: recv_control_msg error -71 req 02 val 2100 [ 342.123740][ T3100] pwc: recv_control_msg error -71 req 04 val 1500 [ 342.143535][ T3100] pwc: recv_control_msg error -71 req 02 val 2500 [ 342.152127][ T142] team0 (unregistering): Port device team_slave_0 removed [ 342.175389][ T3100] pwc: recv_control_msg error -71 req 02 val 2400 [ 342.253883][ T3100] pwc: recv_control_msg error -71 req 02 val 2600 [ 342.282390][ T7392] xt_hashlimit: size too large, truncated to 1048576 [ 342.288103][ T3100] pwc: recv_control_msg error -71 req 02 val 2900 [ 342.742021][ T3100] pwc: recv_control_msg error -71 req 02 val 2800 [ 342.806944][ T3100] pwc: recv_control_msg error -71 req 04 val 1100 [ 342.832573][ T7390] loop1: detected capacity change from 0 to 1024 [ 342.839886][ T3100] pwc: recv_control_msg error -71 req 04 val 1200 [ 342.853812][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.877279][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.891767][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.910730][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.919984][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.861305][ T3100] pwc: Registered as video103. [ 343.881513][ T3100] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 344.048976][ T3100] usb 2-1: USB disconnect, device number 2 [ 344.968840][ T5624] Bluetooth: hci4: command tx timeout [ 345.186905][ T142] team0 (unregistering): Port device team_slave_1 removed [ 345.340146][ T142] team0 (unregistering): Port device team_slave_0 removed [ 346.983340][ T142] team0 (unregistering): Port device team_slave_1 removed [ 347.010421][ T142] team0 (unregistering): Port device team_slave_0 removed [ 347.054545][ T5624] Bluetooth: hci4: command tx timeout [ 347.692026][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 150 seconds [ 347.704521][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 150 seconds [ 347.717545][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 150 seconds [ 347.737385][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 150 seconds [ 349.128579][ T5624] Bluetooth: hci4: command tx timeout [ 349.588495][ T6986] team0: Port device team_slave_0 added [ 350.143886][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.592430][ T7051] team0: Port device team_slave_0 added [ 350.626062][ T7051] team0: Port device team_slave_1 added [ 350.651941][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.689295][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.721205][ T7233] bridge_slave_0: entered allmulticast mode [ 350.761733][ T7233] bridge_slave_0: entered promiscuous mode [ 350.874310][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.929164][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.959754][ T7233] bridge_slave_1: entered allmulticast mode [ 351.006605][ T7233] bridge_slave_1: entered promiscuous mode [ 351.218058][ T5624] Bluetooth: hci4: command tx timeout [ 351.297756][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.323442][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.585500][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.707139][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.192844][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.223790][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.369794][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.460705][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.957111][ T7233] team0: Port device team_slave_0 added [ 353.995219][ T7233] team0: Port device team_slave_1 added [ 354.308179][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.322583][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.340674][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.361895][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.371885][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.393175][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.448883][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.486898][ T5624] Bluetooth: hci1: command tx timeout [ 356.585703][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.625835][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.633090][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.663198][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.015511][ T7233] hsr_slave_0: entered promiscuous mode [ 358.044666][ T7233] hsr_slave_1: entered promiscuous mode [ 358.073042][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 359.232798][ T5624] Bluetooth: hci1: command tx timeout [ 360.298049][ T142] bridge_slave_1: left allmulticast mode [ 360.314228][ T142] bridge_slave_1: left promiscuous mode [ 360.322814][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.336232][ T142] bridge_slave_0: left allmulticast mode [ 360.348061][ T142] bridge_slave_0: left promiscuous mode [ 360.366986][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.413235][ T142] bridge_slave_1: left allmulticast mode [ 360.426832][ T142] bridge_slave_1: left promiscuous mode [ 360.446096][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.465861][ T142] bridge_slave_0: left allmulticast mode [ 360.473599][ T142] bridge_slave_0: left promiscuous mode [ 360.481170][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.611956][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.629980][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.640992][ T142] bond0 (unregistering): Released all slaves [ 360.755065][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.771350][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.784322][ T142] bond0 (unregistering): Released all slaves [ 361.157511][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.176330][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.275622][ T142] team0 (unregistering): Port device team_slave_1 removed [ 361.296821][ T5624] Bluetooth: hci1: command tx timeout [ 361.305769][ T142] team0 (unregistering): Port device team_slave_0 removed [ 361.485451][ T142] team0 (unregistering): Port device team_slave_0 removed [ 361.915939][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.923880][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.935549][ T7391] bridge_slave_0: entered allmulticast mode [ 361.943905][ T7391] bridge_slave_0: entered promiscuous mode [ 361.974360][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.004833][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.013286][ T7391] bridge_slave_1: entered allmulticast mode [ 362.041101][ T7391] bridge_slave_1: entered promiscuous mode [ 362.179420][ T7391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.196047][ T7391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.382194][ T7391] team0: Port device team_slave_0 added [ 362.470268][ T7391] team0: Port device team_slave_1 added [ 362.588651][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.613425][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.673772][ T7391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.702269][ T7233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 362.717660][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.728722][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.735744][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.762493][ T7391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.794127][ T7233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 362.806118][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.817164][ T7233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.832380][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.884015][ T7233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.902059][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.072038][ T7391] hsr_slave_0: entered promiscuous mode [ 363.085027][ T7391] hsr_slave_1: entered promiscuous mode [ 363.097096][ T7391] debugfs: 'hsr0' already exists in 'hsr' [ 363.102951][ T7391] Cannot create hsr debugfs directory [ 363.297054][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 363.366533][ T5624] Bluetooth: hci1: command tx timeout [ 363.583596][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.614169][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.632744][ T7466] bridge_slave_0: entered allmulticast mode [ 363.658148][ T7466] bridge_slave_0: entered promiscuous mode [ 363.684213][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.701919][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.721434][ T7466] bridge_slave_1: entered allmulticast mode [ 363.731884][ T7466] bridge_slave_1: entered promiscuous mode [ 363.906847][ T7466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.958605][ T7466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.986057][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.049497][ T7391] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 364.070330][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.099827][ T7391] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 364.114690][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.137255][ T7466] team0: Port device team_slave_0 added [ 364.184984][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.192661][ T7391] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 364.218218][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.229360][ T7466] team0: Port device team_slave_1 added [ 364.268367][ T7391] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 364.281761][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.295964][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.303922][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.330536][ T7466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.352757][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.360171][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.387509][ T7466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.409119][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.416429][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.455311][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.462591][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.525619][ T7466] hsr_slave_0: entered promiscuous mode [ 364.532663][ T7466] hsr_slave_1: entered promiscuous mode [ 364.539636][ T7466] debugfs: 'hsr0' already exists in 'hsr' [ 364.545427][ T7466] Cannot create hsr debugfs directory [ 365.254112][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.385876][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.417177][ T7466] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 365.434830][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.464495][ T7466] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 365.478711][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.488977][ T7466] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 365.508397][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.525394][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.532678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.543640][ T7466] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 365.559661][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.584357][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.591671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.903109][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 365.997088][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.077463][ T7466] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.119716][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.127186][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.214017][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.221296][ T6197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.328567][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.298117][ T7233] veth0_vlan: entered promiscuous mode [ 367.359330][ T7391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.384577][ T7233] veth1_vlan: entered promiscuous mode [ 367.519969][ T7233] veth0_macvtap: entered promiscuous mode [ 367.563067][ T7233] veth1_macvtap: entered promiscuous mode [ 367.594901][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 367.651438][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.697936][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.790498][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.960560][ T7466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.099255][ T142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.121377][ T142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.156198][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.183297][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.281613][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.290737][ T6197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.307420][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.465004][ T7391] veth0_vlan: entered promiscuous mode [ 368.505747][ T7391] veth1_vlan: entered promiscuous mode [ 368.825046][ T7391] veth0_macvtap: entered promiscuous mode [ 370.531377][ T7391] veth1_macvtap: entered promiscuous mode [ 371.444619][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.458787][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.590791][ T6196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.700963][ T5946] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.780914][ T1090] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.056909][ T1090] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.891332][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.946969][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.213212][ T7466] veth0_vlan: entered promiscuous mode [ 376.234845][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.261681][ T7466] veth1_vlan: entered promiscuous mode [ 376.297529][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.424137][ T7466] veth0_macvtap: entered promiscuous mode [ 377.462049][ T7466] veth1_macvtap: entered promiscuous mode [ 377.509001][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.523865][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.586139][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.641121][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.970500][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 180 seconds [ 377.979305][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.981745][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 180 seconds [ 378.002783][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 180 seconds [ 378.014275][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 180 seconds [ 378.787569][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797826][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.973620][ T1100] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.428371][ T5883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.492447][ T5883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.759525][ T7758] xt_hashlimit: size too large, truncated to 1048576 [ 381.442422][ T6195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.588055][ T6195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.593913][ T7765] netlink: 67 bytes leftover after parsing attributes in process `syz.6.312'. [ 383.332541][ T7772] netlink: 'syz.7.313': attribute type 3 has an invalid length. [ 386.296261][ T7801] netlink: 'syz.6.316': attribute type 2 has an invalid length. [ 389.782442][ T59] IPVS: starting estimator thread 0... [ 390.459090][ T7824] IPVS: using max 28 ests per chain, 67200 per kthread [ 390.473769][ T7827] loop5: detected capacity change from 0 to 256 [ 398.457428][ T7884] netlink: 'syz.8.337': attribute type 2 has an invalid length. [ 399.088931][ T7881] loop6: detected capacity change from 0 to 2048 [ 399.373186][ T7882] xt_hashlimit: size too large, truncated to 1048576 [ 402.298468][ T142] IPVS: starting estimator thread 0... [ 402.564526][ T7901] IPVS: using max 21 ests per chain, 50400 per kthread [ 402.594272][ T7881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.126742][ T187] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 404.130989][ T187] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 404.166854][ T187] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.218565][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.321655][ T7917] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 404.330778][ T7917] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 404.339566][ T7917] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 405.039846][ T187] usb 6-1: config 0 descriptor?? [ 405.175102][ T187] pwc: Askey VC010 type 2 USB webcam detected. [ 405.421864][ T7922] binder: 7915:7922 ioctl c0306201 200000000040 returned -22 [ 406.140597][ T7925] loop4: detected capacity change from 0 to 256 [ 406.242237][ T7921] loop1: detected capacity change from 0 to 1024 [ 407.386465][ T187] pwc: send_video_command error -71 [ 407.452537][ T187] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 407.627865][ T187] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 408.139048][ T187] usb 6-1: USB disconnect, device number 3 [ 408.837766][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 210 seconds [ 408.848951][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 210 seconds [ 408.860119][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 210 seconds [ 408.874054][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 210 seconds [ 409.361185][ T7944] kAFS: Invalid Command on /proc/fs/afs/cells file [ 414.275749][ T7976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.189283][ T7974] xt_hashlimit: size too large, truncated to 1048576 [ 415.491908][ T7982] loop7: detected capacity change from 0 to 1024 [ 417.043781][ T7981] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 417.107590][ T7986] loop6: detected capacity change from 0 to 8 [ 420.795917][ T8024] netlink: 348 bytes leftover after parsing attributes in process `syz.7.371'. [ 420.805405][ T8024] netlink: 348 bytes leftover after parsing attributes in process `syz.7.371'. [ 421.195819][ T8026] loop7: detected capacity change from 0 to 4096 [ 421.785745][ T8026] ntfs3(loop7): Failed to load $AttrDef (-2) [ 425.803706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 429.308813][ T8060] xt_hashlimit: size too large, truncated to 1048576 [ 430.003015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 434.526592][ T8086] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 436.286611][ T8105] zram0: detected capacity change from 0 to 8 [ 438.147459][ T8118] 0x000000000007-0x000000020000 : "" [ 438.785867][ T8118] ftl_cs: FTL header corrupt! [ 439.205112][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 240 seconds [ 439.222725][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 240 seconds [ 439.246801][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 240 seconds [ 439.263512][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 240 seconds [ 439.807222][ T5624] Bluetooth: hci2: Malformed Event: 0x2f [ 439.848014][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.855344][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.612349][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.641332][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.657315][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.703696][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.715694][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.810764][ T5624] Bluetooth: hci5: command tx timeout [ 444.882014][ T5624] Bluetooth: hci5: command tx timeout [ 447.965423][ T51] Bluetooth: hci5: command tx timeout [ 447.971009][ T5619] Bluetooth: hci6: command 0x0406 tx timeout [ 448.907155][ T8186] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 449.683091][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 449.712014][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 449.725087][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 449.738560][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 449.746942][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 450.013040][ T5619] Bluetooth: hci5: command tx timeout [ 450.303872][ T187] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 451.853977][ T5624] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 451.863123][ T5619] Bluetooth: hci7: command tx timeout [ 452.351991][ T187] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 452.366741][ T187] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 452.449875][ T187] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 452.480893][ T187] usb 8-1: config 220 interface 0 has no altsetting 0 [ 452.853708][ T187] usb 8-1: string descriptor 0 read error: -71 [ 452.871786][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.701614][ T187] usb 8-1: can't set config #220, error -71 [ 453.720607][ T187] usb 8-1: USB disconnect, device number 2 [ 453.921570][ T5619] Bluetooth: hci7: command tx timeout [ 454.021201][ T8225] loop7: detected capacity change from 0 to 256 [ 456.002956][ T5619] Bluetooth: hci7: command tx timeout [ 456.678481][ T1090] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.089512][ T8241] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 458.081288][ T5619] Bluetooth: hci7: command tx timeout [ 458.655512][ T1090] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.449598][ T1090] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.559621][ T8305] evm: overlay not supported [ 467.570721][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 467.924732][ T1090] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.484795][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.516154][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.549573][ T8135] bridge_slave_0: entered allmulticast mode [ 468.620837][ T8135] bridge_slave_0: entered promiscuous mode [ 468.756999][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.810558][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.832935][ T8135] bridge_slave_1: entered allmulticast mode [ 468.876332][ T8135] bridge_slave_1: entered promiscuous mode [ 469.987349][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 270 seconds [ 469.998341][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 270 seconds [ 470.009546][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 270 seconds [ 470.020775][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 270 seconds [ 470.443541][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.705866][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.350380][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.433'. [ 474.359422][ T8356] netlink: 348 bytes leftover after parsing attributes in process `syz.8.433'. [ 474.368755][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.433'. [ 474.377834][ T8356] netlink: 348 bytes leftover after parsing attributes in process `syz.8.433'. [ 474.388008][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.433'. [ 474.883106][ T4973] udevd[4973]: worker [5933] /devices/virtual/block/nbd0 timeout; kill it [ 475.050273][ T4973] udevd[4973]: seq 11406 '/devices/virtual/block/nbd0' killed [ 476.499095][ T8135] team0: Port device team_slave_0 added [ 476.522292][ T8135] team0: Port device team_slave_1 added [ 477.263524][ T1090] bridge_slave_1: left allmulticast mode [ 477.276258][ T8372] loop8: detected capacity change from 0 to 128 [ 477.359728][ T1090] bridge_slave_1: left promiscuous mode [ 477.432744][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.576932][ T1090] bridge_slave_0: left allmulticast mode [ 477.609855][ T1090] bridge_slave_0: left promiscuous mode [ 477.634704][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.658433][ T8372] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 477.759077][ T8380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.806341][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 479.650727][ T8388] loop5: detected capacity change from 0 to 4096 [ 479.663554][ T8388] ntfs3: Unknown parameter 'ntfs3' [ 482.197728][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.155155][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.247621][ T1090] bond0 (unregistering): Released all slaves [ 484.954017][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.199590][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.259142][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.278060][ T8416] tipc: Started in network mode [ 485.299736][ T8416] tipc: Node identity 92cc4df19e7b, cluster identity 4711 [ 485.308208][ T8416] tipc: Enabled bearer , priority 0 [ 485.373273][ T8436] syzkaller0: entered promiscuous mode [ 485.412084][ T8436] syzkaller0: entered allmulticast mode [ 485.642712][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.683064][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.753448][ T8460] loop4: detected capacity change from 0 to 2640 [ 485.776158][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.785106][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.807151][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.815804][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.824496][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.836080][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.845340][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.859843][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.868543][ T8460] ldm_validate_partition_table(): Disk read failed. [ 485.875968][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.884736][ T8460] Buffer I/O error on dev loop4, logical block 0, async page read [ 485.893303][ T8460] Dev loop4: unable to read RDB block 0 [ 485.909679][ T8460] loop4: unable to read partition table [ 485.927425][ T8460] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 486.045901][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.326202][ T8436] tipc: Resetting bearer [ 488.501542][ T8436] tipc: Disabling bearer [ 489.633417][ T3100] tipc: Node number set to 213339633 [ 490.260568][ T8469] loop1: detected capacity change from 0 to 32768 [ 490.656155][ T8477] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 492.437946][ T8469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 492.622541][ T8489] 9pnet_fd: p9_fd_create_tcp (8489): problem binding to privport [ 494.618735][ T8501] loop7: detected capacity change from 0 to 32768 [ 494.626537][ T8501] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 494.665865][ T8501] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.456 (8501) [ 494.739545][ T8501] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 494.749807][ T8501] BTRFS info (device loop7): using crc32c checksum algorithm [ 495.003981][ T5607] ocfs2: Unmounting device (7,1) on (node local) [ 495.071278][ T8501] BTRFS info (device loop7): rebuilding free space tree [ 495.192006][ T8501] BTRFS info (device loop7): disabling free space tree [ 495.199568][ T8501] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 495.209778][ T8501] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 495.248442][ T8501] BTRFS info (device loop7): enabling ssd optimizations [ 495.255632][ T8501] BTRFS info (device loop7): turning on async discard [ 495.262675][ T8501] BTRFS info (device loop7): force clearing of disk cache [ 495.269967][ T8501] BTRFS info (device loop7): use zstd compression, level 3 [ 495.495171][ T1090] hsr_slave_0: left promiscuous mode [ 495.536151][ T8501] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 495.550482][ T8501] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 495.574235][ T1090] hsr_slave_1: left promiscuous mode [ 495.597170][ T8501] overlayfs: d_ino too big (., ino=4611686018427388161, xinobits=3) [ 495.606168][ T8501] overlayfs: d_ino too big (.., ino=4611686018427388160, xinobits=3) [ 495.617655][ T8501] overlayfs: d_ino too big (38, ino=9223372036854776026, xinobits=3) [ 495.627078][ T8501] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 495.637585][ T8501] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 495.647052][ T8501] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 495.655619][ T8501] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 495.703459][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.782566][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.837637][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.895795][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.904650][ T8501] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 496.223007][ T1090] veth1_macvtap: left promiscuous mode [ 496.263446][ T1090] veth0_macvtap: left promiscuous mode [ 496.293103][ T1090] veth1_vlan: left promiscuous mode [ 496.316638][ T1090] veth0_vlan: left promiscuous mode [ 502.017156][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.017599][ T5624] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 502.025894][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.063984][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 300 seconds [ 502.367197][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 300 seconds [ 502.378394][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 300 seconds [ 502.389517][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 300 seconds [ 502.417565][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 502.863717][ T8562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.159105][ T8550] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 507.392388][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 507.408921][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 507.444193][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 507.453985][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 507.467171][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 507.475579][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 507.647120][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 509.518319][ T5624] Bluetooth: hci3: command tx timeout [ 509.641840][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 509.656471][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 509.669343][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 509.690079][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 509.710048][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 511.639794][ T5619] Bluetooth: hci3: command tx timeout [ 511.645522][ T8602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.846100][ T5619] Bluetooth: hci6: command tx timeout [ 512.027422][ T8603] loop1: detected capacity change from 0 to 1024 [ 512.061084][ T8603] EXT4-fs: Ignoring removed orlov option [ 512.501337][ T8612] netlink: 348 bytes leftover after parsing attributes in process `syz.5.474'. [ 512.510725][ T8612] netlink: 348 bytes leftover after parsing attributes in process `syz.5.474'. [ 513.012058][ T8613] loop5: detected capacity change from 0 to 4096 [ 513.274650][ T8613] ntfs3(loop5): Failed to load $AttrDef (-2) [ 513.347438][ T1090] IPVS: stop unused estimator thread 0... [ 513.678070][ T5619] Bluetooth: hci3: command tx timeout [ 513.919086][ T5619] Bluetooth: hci6: command tx timeout [ 514.648688][ T8603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.759358][ T5619] Bluetooth: hci3: command tx timeout [ 516.000158][ T5619] Bluetooth: hci6: command tx timeout [ 518.084600][ T5619] Bluetooth: hci6: command tx timeout [ 518.224712][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.675741][ T6195] bond0 (unregistering): Released all slaves [ 518.830034][ T8659] loop8: detected capacity change from 0 to 512 [ 518.894932][ T8659] EXT4-fs: Mount option(s) incompatible with ext3 [ 525.931075][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 525.958043][ T8682] 9p: Bad value for 'rfdno' [ 527.155376][ T8689] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 531.932475][ T6195] bridge_slave_1: left allmulticast mode [ 531.987340][ T6195] bridge_slave_1: left promiscuous mode [ 532.039654][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.105138][ T6195] bridge_slave_0: left allmulticast mode [ 532.162941][ T6195] bridge_slave_0: left promiscuous mode [ 532.206899][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.948860][ T8725] 9pnet_fd: p9_fd_create_unix (8725): problem connecting socket: ./file0: -111 [ 532.967358][ T8725] input: syz0 as /devices/virtual/input/input7 [ 533.993350][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 330 seconds [ 534.004773][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 330 seconds [ 534.019289][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 330 seconds [ 534.030483][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 330 seconds [ 534.626107][ T8737] Device name cannot be null; rc = [-22] [ 534.869073][ T8737] loop8: detected capacity change from 0 to 1024 [ 534.882785][ T6195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.989864][ T6195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.075126][ T6195] bond0 (unregistering): Released all slaves [ 535.518952][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.640400][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.681880][ T8741] hfsplus: invalid file type 0177755 for inode 17 [ 536.779950][ T8752] binder: 8749:8752 ioctl c0306201 0 returned -14 [ 536.812242][ T8752] binder: BINDER_SET_CONTEXT_MGR already set [ 536.819597][ T8752] binder: 8749:8752 ioctl 4018620d 200000000040 returned -16 [ 538.801801][ T6195] team0 (unregistering): Port device team_slave_1 removed [ 538.958093][ T8755] loop7: detected capacity change from 0 to 512 [ 538.991745][ T6195] team0 (unregistering): Port device team_slave_0 removed [ 539.031579][ T8755] EXT4-fs (loop7): Test dummy encryption mode enabled [ 539.238432][ T8755] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 539.256097][ T8755] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 540.378271][ T8755] EXT4-fs (loop7): 1 truncate cleaned up [ 540.429799][ T8755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.746299][ T8766] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 542.242601][ T8776] loop8: detected capacity change from 0 to 128 [ 542.275793][ T8776] ufs: ufstype=hp is supported read-only [ 542.290269][ T8776] ufs: ufs_fill_super(): bad magic number [ 544.319540][ T7391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.330941][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 545.734607][ T8793] No such timeout policy "s" [ 545.740455][ T8793] netlink: Failed to associated timeout policy 's' [ 550.265370][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.292986][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.328403][ T8586] bridge_slave_0: entered allmulticast mode [ 550.368115][ T8586] bridge_slave_0: entered promiscuous mode [ 550.543473][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.599867][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.678182][ T8586] bridge_slave_1: entered allmulticast mode [ 550.968147][ T8586] bridge_slave_1: entered promiscuous mode [ 552.578063][ T8836] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 553.317661][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.560524][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.598758][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.644420][ T8575] bridge_slave_0: entered allmulticast mode [ 553.712710][ T8575] bridge_slave_0: entered promiscuous mode [ 553.799352][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.948272][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.972232][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.997480][ T8575] bridge_slave_1: entered allmulticast mode [ 554.041573][ T8575] bridge_slave_1: entered promiscuous mode [ 555.209597][ T8586] team0: Port device team_slave_0 added [ 557.039705][ T8575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.099341][ T8586] team0: Port device team_slave_1 added [ 557.255008][ T8575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.602993][ T8575] team0: Port device team_slave_0 added [ 557.884825][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.609346][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.239194][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.261202][ T8575] team0: Port device team_slave_1 added [ 559.659337][ T8874] loop1: detected capacity change from 0 to 32768 [ 559.721484][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.751466][ T8874] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 559.769997][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.805963][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.171126][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.188631][ T8880] loop7: detected capacity change from 0 to 128 [ 561.215724][ T8880] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 561.264182][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.408929][ T8575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.505641][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.528753][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.653160][ T8575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.274192][ T8586] hsr_slave_0: entered promiscuous mode [ 562.299782][ T5607] ocfs2: Unmounting device (7,1) on (node local) [ 562.314399][ T8586] hsr_slave_1: entered promiscuous mode [ 562.609047][ T8575] hsr_slave_0: entered promiscuous mode [ 562.637567][ T8575] hsr_slave_1: entered promiscuous mode [ 562.663853][ T8575] debugfs: 'hsr0' already exists in 'hsr' [ 562.690447][ T8575] Cannot create hsr debugfs directory [ 562.721878][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.732107][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.114875][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.531'. [ 563.502853][ T8895] ALSA: mixer_oss: invalid OSS volume '' [ 564.651222][ T1626] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 360 seconds [ 564.663396][ T1626] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 360 seconds [ 564.678598][ T1626] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 360 seconds [ 564.691368][ T1626] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 360 seconds [ 571.759028][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 571.800067][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 571.813304][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 571.832479][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 571.842075][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 572.937042][ T8953] loop8: detected capacity change from 0 to 32768 [ 573.072951][ T8953] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 574.551545][ T5619] Bluetooth: hci5: command tx timeout [ 575.703725][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 575.748805][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 575.763921][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 575.792004][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 575.862766][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 576.038714][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 576.684700][ T5624] Bluetooth: hci5: command tx timeout [ 578.000057][ T5624] Bluetooth: hci7: command tx timeout [ 578.103627][ T6194] bridge_slave_1: left allmulticast mode [ 578.122278][ T6194] bridge_slave_1: left promiscuous mode [ 578.176632][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.251543][ T7466] ocfs2: Unmounting device (7,8) on (node local) [ 578.261245][ T6194] bridge_slave_0: left allmulticast mode [ 578.288848][ T6194] bridge_slave_0: left promiscuous mode [ 578.411319][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.550274][ T8977] loop5: detected capacity change from 0 to 2048 [ 578.715126][ T5624] Bluetooth: hci5: command tx timeout [ 580.075270][ T5624] Bluetooth: hci7: command tx timeout [ 580.225249][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.549645][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.224979][ T5624] Bluetooth: hci5: command tx timeout [ 581.542455][ T6194] bond0 (unregistering): Released all slaves [ 582.154482][ T5624] Bluetooth: hci7: command tx timeout [ 584.314014][ T5624] Bluetooth: hci7: command tx timeout [ 584.467396][ T8996] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 584.477042][ T8996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 584.486792][ T8996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 584.527853][ T30] audit: type=1800 audit(1787585627.876:4): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.550" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 585.207326][ T6194] hsr_slave_0: left promiscuous mode [ 585.228280][ T9005] ------------[ cut here ]------------ [ 585.235455][ T9005] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 585.235481][ T9005] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bc0, CPU#0: syz.8.552/9005 [ 585.251630][ T9005] Modules linked in: [ 585.255715][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.8.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.266738][ T9005] Tainted: [L]=SOFTLOCKUP [ 585.271077][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 585.282139][ T9005] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 585.287697][ T9005] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 b8 a2 78 05 45 85 c0 75 13 48 8d 3d ac a7 7b 05 48 c7 c6 e0 d3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 585.307498][ T9005] RSP: 0018:ffffc90003417b40 EFLAGS: 00010246 [ 585.313594][ T9005] RAX: 0000000000000003 RBX: ffff88801efcd318 RCX: 1ffffffff2289aec [ 585.321760][ T9005] RDX: 0000000000000000 RSI: ffffffff8befd3e0 RDI: ffffffff9147dc60 [ 585.330004][ T9005] RBP: ffffc90003417cb0 R08: 0000000000000000 R09: 0000000000000000 [ 585.339127][ T9005] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.347192][ T9005] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88801efcd1c0 [ 585.355301][ T9005] FS: 0000000000000000(0000) GS:ffff888123b7b000(0000) knlGS:0000000000000000 [ 585.364326][ T9005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.371029][ T9005] CR2: 0000001b32d24000 CR3: 000000007627c000 CR4: 0000000000350ef0 [ 585.379144][ T9005] Call Trace: [ 585.382463][ T9005] [ 585.385531][ T9005] ? dvb_frontend_release+0x2f2/0x5d0 [ 585.390994][ T9005] ? __pfx___mutex_lock+0x10/0x10 [ 585.396145][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.401819][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.407544][ T9005] ? find_held_lock+0x2b/0x80 [ 585.412272][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.417994][ T9005] ? rcu_is_watching+0x13/0xc0 [ 585.422862][ T9005] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 585.428812][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.434566][ T9005] ? lockdep_hardirqs_on+0x7d/0x110 [ 585.441130][ T9005] ? dvb_frontend_release+0x2f2/0x5d0 [ 585.446627][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.452342][ T9005] dvb_frontend_release+0x2f2/0x5d0 [ 585.457672][ T9005] ? __pfx_dvb_frontend_release+0x10/0x10 [ 585.463524][ T9005] __fput+0x3ff/0xb50 [ 585.467572][ T9005] task_work_run+0x150/0x240 [ 585.472187][ T9005] ? __pfx_task_work_run+0x10/0x10 [ 585.477371][ T9005] do_exit+0x951/0x2ae0 [ 585.481719][ T9005] ? common_nsleep+0xa1/0xd0 [ 585.486414][ T9005] ? __pfx_do_exit+0x10/0x10 [ 585.491046][ T9005] __x64_sys_exit+0x42/0x50 [ 585.495605][ T9005] x64_sys_call+0x156c/0x1570 [ 585.500336][ T9005] do_syscall_64+0x123/0x790 [ 585.505027][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.511049][ T9005] RIP: 0033:0x7f9732d9e0d9 [ 585.515545][ T9005] Code: Unable to access opcode bytes at 0x7f9732d9e0af. [ 585.522781][ T9005] RSP: 002b:00007f9730ff5ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 585.531308][ T9005] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9732d9e0d9 [ 585.540345][ T9005] RDX: 00007f9730ff69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.548414][ T9005] RBP: 00007f9732e35024 R08: 0000000000000000 R09: 0000000000000058 [ 585.556564][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.564637][ T9005] R13: 00007f9733026038 R14: 00007f9733025fa0 R15: 00007fff990920b8 [ 585.572924][ T9005] [ 585.576002][ T9005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 585.583317][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.8.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.594145][ T9005] Tainted: [L]=SOFTLOCKUP [ 585.598498][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 585.608946][ T9005] Call Trace: [ 585.612276][ T9005] [ 585.615216][ T9005] dump_stack_lvl+0x100/0x190 [ 585.620104][ T9005] vpanic+0x553/0x970 [ 585.624235][ T9005] ? __pfx_vpanic+0x10/0x10 [ 585.628794][ T9005] ? lock_release+0x24d/0x310 [ 585.633525][ T9005] panic+0xd1/0xe0 [ 585.637304][ T9005] ? __pfx_panic+0x10/0x10 [ 585.641813][ T9005] check_panic_on_warn.cold+0x19/0x34 [ 585.647209][ T9005] ? __mutex_lock+0x944/0x1bc0 [ 585.651996][ T9005] __warn.cold+0x191/0x318 [ 585.656433][ T9005] __report_bug+0x30f/0x440 [ 585.661059][ T9005] ? __mutex_lock+0x944/0x1bc0 [ 585.665870][ T9005] ? __pfx___report_bug+0x10/0x10 [ 585.670953][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.676652][ T9005] report_bug_entry+0xe2/0x290 [ 585.681520][ T9005] ? __mutex_lock+0x94b/0x1bc0 [ 585.686509][ T9005] handle_bug+0x1cd/0x2a0 [ 585.690896][ T9005] exc_invalid_op+0x17/0x50 [ 585.695903][ T9005] asm_exc_invalid_op+0x1a/0x20 [ 585.700806][ T9005] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 585.706245][ T9005] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 b8 a2 78 05 45 85 c0 75 13 48 8d 3d ac a7 7b 05 48 c7 c6 e0 d3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 585.726087][ T9005] RSP: 0018:ffffc90003417b40 EFLAGS: 00010246 [ 585.732211][ T9005] RAX: 0000000000000003 RBX: ffff88801efcd318 RCX: 1ffffffff2289aec [ 585.740307][ T9005] RDX: 0000000000000000 RSI: ffffffff8befd3e0 RDI: ffffffff9147dc60 [ 585.748432][ T9005] RBP: ffffc90003417cb0 R08: 0000000000000000 R09: 0000000000000000 [ 585.756420][ T9005] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.764433][ T9005] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88801efcd1c0 [ 585.772449][ T9005] ? dvb_frontend_release+0x2f2/0x5d0 [ 585.777871][ T9005] ? __pfx___mutex_lock+0x10/0x10 [ 585.783083][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.788768][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.794432][ T9005] ? find_held_lock+0x2b/0x80 [ 585.799128][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.804843][ T9005] ? rcu_is_watching+0x13/0xc0 [ 585.809662][ T9005] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 585.815532][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.821206][ T9005] ? lockdep_hardirqs_on+0x7d/0x110 [ 585.826459][ T9005] ? dvb_frontend_release+0x2f2/0x5d0 [ 585.832059][ T9005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.837756][ T9005] dvb_frontend_release+0x2f2/0x5d0 [ 585.843125][ T9005] ? __pfx_dvb_frontend_release+0x10/0x10 [ 585.848932][ T9005] __fput+0x3ff/0xb50 [ 585.853005][ T9005] task_work_run+0x150/0x240 [ 585.857649][ T9005] ? __pfx_task_work_run+0x10/0x10 [ 585.862817][ T9005] do_exit+0x951/0x2ae0 [ 585.867124][ T9005] ? common_nsleep+0xa1/0xd0 [ 585.871773][ T9005] ? __pfx_do_exit+0x10/0x10 [ 585.876554][ T9005] __x64_sys_exit+0x42/0x50 [ 585.881097][ T9005] x64_sys_call+0x156c/0x1570 [ 585.885824][ T9005] do_syscall_64+0x123/0x790 [ 585.890450][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.896378][ T9005] RIP: 0033:0x7f9732d9e0d9 [ 585.900822][ T9005] Code: Unable to access opcode bytes at 0x7f9732d9e0af. [ 585.908508][ T9005] RSP: 002b:00007f9730ff5ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 585.917083][ T9005] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9732d9e0d9 [ 585.925196][ T9005] RDX: 00007f9730ff69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.933417][ T9005] RBP: 00007f9732e35024 R08: 0000000000000000 R09: 0000000000000058 [ 585.941417][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.949534][ T9005] R13: 00007f9733026038 R14: 00007f9733025fa0 R15: 00007fff990920b8 [ 585.957558][ T9005] [ 585.961132][ T9005] Kernel Offset: disabled [ 585.965500][ T9005] Rebooting in 86400 seconds..