last executing test programs: 1m31.359661054s ago: executing program 0 (id=77): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m27.227699173s ago: executing program 0 (id=93): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 1m26.882291488s ago: executing program 0 (id=95): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4172, 0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000001c0)={0x0, 0x0, 0x2500}) 1m25.867664024s ago: executing program 0 (id=96): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000200), 0x1, 0x150, &(0x7f0000000240)="$eJzs281KOlEYx/Hf+P7334tlbaKF0KI2Oan04q4uRXQSaSzJNkoQXUr3V1A3kOGgJxyFwNBDzvezen4+HHxmcfTZjABEVkEFOXKUHIb9TO4p79geCcCSDCR9DgBEU/zd9gQA7Hi7kjqSXj8e64onp/aDYf9y3I+lpvvP0l5i1HfSyoT3ixfpcHze+TfzfNb0szP7Rwfj7/+vNa1rQ5vKaUvbo37DnN/95TYERIujYjhPfBDTdcv3TkxOBrlkcirI5VCumJwOcrF+5zcW9QgA5hT74f7HQ/c/Ebr/AP6ubq9/U/N9756CgoLCFLZ/mQAsmvvQ7rjdXv+41a41vaZ3W74oV88qp6Xzqhts/u7k/g9gdXz/6dueBAAAAAAAAAAAAAAAzCuvHdsjAAAAAFiSZbxOZPsZAQAAAAAAAAAAAAAAAAAAgFXxFQAA//+KWyUw") 1m25.644090172s ago: executing program 0 (id=97): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8a00, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1m24.114396302s ago: executing program 0 (id=102): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) r5 = fsopen(&(0x7f0000000000)='bdev\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000080)='R\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{0x0}], 0x1}, 0x8940) dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 1m13.115036588s ago: executing program 1 (id=128): socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) set_mempolicy(0x8000, &(0x7f0000000080)=0x8000000000000c, 0x8000000000000000) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x10, 0x0, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') lseek(r5, 0xd7, 0x0) pread64(r4, &(0x7f0000000ac0)=""/4096, 0x1000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) acct(0x0) fcntl$setownex(0xffffffffffffffff, 0x6, 0x0) 1m11.660580733s ago: executing program 1 (id=131): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x0], &(0x7f0000000580)=[r2], &(0x7f0000000040)}) 1m11.310082423s ago: executing program 1 (id=133): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) 1m10.483583894s ago: executing program 1 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f00000002c0)=""/55, 0x37}], 0x2, 0x0, 0x0) 1m6.07962766s ago: executing program 1 (id=147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1m5.799473667s ago: executing program 1 (id=151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$user(&(0x7f0000000280), &(0x7f0000001680)={'syz', 0x2}, &(0x7f0000000340)='`', 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1", @ANYRESOCT], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 37.381798574s ago: executing program 4 (id=231): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000240)=""/15, 0xf}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') lseek(r8, 0x0, 0x4) 34.34511825s ago: executing program 4 (id=239): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x12e8, 0xffffffff, 0x11d0, 0x11d0, 0x11d0, 0xffffffff, 0xffffffff, 0x12e8, 0x12e8, 0x12e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'erspan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'nicvf0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1348) 34.161340659s ago: executing program 4 (id=241): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080), &(0x7f0000000140)) read(r0, &(0x7f0000002180)=""/208, 0xd0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, 0x0, 0x0) 33.647579919s ago: executing program 3 (id=243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0) 33.527879545s ago: executing program 3 (id=244): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write(r0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800}, 0x20) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "cd104d", 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, {[], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "b8aaf41239d6e99eff5dade105ac187c51d338623011be1b", "cddccdfa03538622582b235649be04fd475dcb9790fa1e02bef07da86de3467f"}}}}}}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 33.091663589s ago: executing program 4 (id=246): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r2, 0x0, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r2, 0x0, 0xffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 32.970138152s ago: executing program 4 (id=247): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e550218", 0x6}], 0x2}}], 0x1, 0x0) 31.819766936s ago: executing program 4 (id=249): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000240)=""/15, 0xf}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') lseek(r8, 0x0, 0x4) 30.757628394s ago: executing program 3 (id=252): recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 30.3801578s ago: executing program 3 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0) 29.31579343s ago: executing program 3 (id=256): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080), &(0x7f0000000140)) read(r0, &(0x7f0000002180)=""/208, 0xd0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, 0x0, 0x0) 27.307692983s ago: executing program 3 (id=262): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) splice(r1, 0x0, r0, 0x0, 0x7f, 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800}, 0x20) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "cd104d", 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, {[], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "b8aaf41239d6e99eff5dade105ac187c51d338623011be1b", "cddccdfa03538622582b235649be04fd475dcb9790fa1e02bef07da86de3467f"}}}}}}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 13.453816427s ago: executing program 2 (id=286): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r0, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0) 11.724420148s ago: executing program 2 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x79, 0x0, 0xc}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@sg0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x22120, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000200)) 10.647757259s ago: executing program 2 (id=291): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 10.515216801s ago: executing program 2 (id=292): r0 = socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 7.900136627s ago: executing program 2 (id=294): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="636f6d7072657373696f6e3d677a69702c7374725f686173683d6372633332632c7374725f68618b683d63726336342c6261636b67726f756e645f636f6d7072657373696f6e3d7a7374642c6e6f636f772c6261636b67726f756e645f636f6d7072657373696f6e3d677a69702c7374725f686173683d63726336342c20"], 0x1, 0x5d81, &(0x7f000000bbc0)="$eJzs3X2QHOWZGPDumVntSquPlSybFRJiMbIdccEWKBDLZ0cb5+zYjmxkYQEWp5MErLAOIQl9IJAu4SsHBJOUqqAOAnFKBxS5Sl0luHQJ4U6pkjHgK18VhUz8B0e+jgrOH/ER1VniiOTypna3e3emt9/p2elZIbjfr0o78/Y+87zv0/NOd7+j3dkIAACAvxFe+d09737j/C/9+N6hU3d95Y9vvSfqrY5u70kD+pLbO96vETKdlv/kTMMz213rH73Nzovz/mThu333rfn6Q6u+/JPNfzp/cOmyoSu/f+Sq++978Qu/fPGxJ9YU9ZPOp0sm2vFfxlG09O0jj93/8p+dN7ItHuk/7rs7mj8/XvCD+XEmxYrTURTdND7Oxm8eObVy68jtPd/tbtg+L5PEfP+brSeZZwc33fDUsVsGXz4ysGvlz09esfPuiZC4p24+RdHczfWP74qiaGbyb0Q62/rTBye3a6MomlX3uM8WjOviFsd/aaC9JLmdkdz2FuRJv39Rpl1rcRy1zG13i49rV2Wa82dl91/2YDRd0jrnJrfPJ7eXTDFPNf0XR5U4qo0Pf3s8MUeiuuctjuLRud0z3q6MtqPxdpRtx5l2JdOudmXqGu032bHVOG7cnsZltqeH41qy/aL6Y3WOdYHti5LbnuSF+l7ajrJ3xvROujNRR1Q3rhNna2IEVAKvvXT7+PCSJ6M32dYbL5j0mOEc6fdO/GjLhnfeOPB8X2Ac8XNxkj9uK//g0JPHnr3u6KL+UP7NlSR/pa38r1RfPf3Myf7ZwfyH0vzVtvKv/9XPHrz36v0Lg/vnRLp/am3lX/bw7IOn9q/rHgjlP5zm72kr/5Ubl6664OS+24PjX5Hun5lt5f/pI8vPbDz0wtFg/ijNP6ut/G8++fSS6qJHjwfzH0v3T29b+a9Z+fjqry2+74ng/n8tzT+nrfwbjt+/eddTLy0Pzs+16f7payv/6dWvv3Wmb83ToWNnfPhsn2EBPlw+klxjPZi0211nllW3Xnh8oDZ2zTc7+Tenkx1lxHVrFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo16Or/8Nt9e1P/J/b1x//j0u31ZJ2dy2K4iiK3qmOtdPtM6IonhlF0Z69W3bv3bbj5oHf3rlv944t2we27B0Y2rF3950Df+dvD+we2rV9y50j311x6cqxxy0YzRZFC+ILJo1leHh4OIqigfptaX+//9Xn/t/6J/7q21G04qOvL60F6/nMf33rSwtzvmbEg8Nr/9UVjxyY8b/mjW3oS8bVFxpXX+O2dAS9g6/9+Reff2NkXB9rNq7HXr32/zYMaHTDRJ5EpTuqjN7pjmfljmN81BPjGd1fta3btg+tKN6/cWD/fuqlPzr57+9Y/8/H9m9PsI4W9+/IXq0NP/SLez919xeHPncOP+9F+7uuhNHxpfuvJ9nfc5O65gbqqgTqun3gzRP/4t/952fujlbUfnHh5L6L6upKJkBXvKilftMeZsXzG2J7kvj0GU8f95m9t+76zJ47D1y67dYtNw/dPLRj5corVl228rLLV638zGjpY187Vn/a/6darH92kml2vDh3v2W3pv1eOPq1GiXDTm/q7jTqinrHbjP7OQ3PVt2bfK83XjAp13CO9HsnfrRlwztvHHg+9MqLnxvrcWY0Z+w2XhKI3J55YHV8wHn9n53X5c7f69mefm3tdVk0rqJ5NTKu4nlVP6Imx7FXL37wF0898C+vb+F4URc6Or50nLNGXi6XRXWv28n7Kq+uFp6fwbz9cOOlu//ozm0bDhUdz+ufmfqvGfHg8P9cEn99354/3z22YbrOl59PbkdPj/UDavN8OT7qifGM7q+e5Pk4V/dvd1RN6urNHde6+KkvfOrWo782Pr4ZM6I7tuzdu/uysa8f1Lr+Ysa8hdvuWXzBpLouH/tadNy/MNMuPO5X8usrOu5n+5mIz883kGn3RtW2zhPrf/WzB++9ev/C4HniRKvnid9paFVLnicqgdf7Q3/1vYF3r//Wu0Xz6ao9i+9amPM1W97g8At/+OuXfe7aq788tuGsXLfXD6jN49D4qJPxpPtr9Dh0+blTx/v3PDe8EOPB4Qu//8lrzpy67ZtjG4r273h03v5dWXycrwbqur7r4/Mf+fnij3du/u7Z9NcXf3rW7HNs/vYk+7cnsH/HR52Mp1q/fz99487tN421z93rtjHdBeuf9Lyz584Dt2zZvn1o957W6mr1fJr2k93L7Z5P07PHgoK60udroq7pu9PK/mr19ZaO/6ZMjnZfbwCpifPCjIbt2eNn+r7f0rnR+k8/8MNX44Gx82Wn3m9N+zk/c2Ju9/3WonXSxzPtxnVSLaqre8zkddLoQ4rWSdl+itZJF2faxeuYB3MrCT1/XcmZN+9908x4ayMZQvOjP8nfn7TT682ln46uqD7/ia/Gg63Nj1avp9N+/lZmB7V7PV00P5ZF+ePq9Pz4ZOZBxc/3odyR9QSej6Lne1lDouHhsuvyvsCo03V5bxS3lX9w6Mljz153dFEw/+ZKkr/SVv5Xqq+efuZk/+xg/kNp/lpb+Zc9PPvgqf3ruoP5D6f7p6et/FduXLrqgpP7bg/mX5GOf2Zb+X/6yPIzGw+9cDSYP0rz97aV/5qVj6/+2uL7ngjmfy1O+hl57UbRkVMrt46146grmf/pOLoaxhVl23GmXcm0q/Xtytj/9Y53UI3jxu1pXGZ7Wkct2X5R3RjzrA9sT1+1PckL+720HWXvNN+eHp7ScZ0InH/OlkrdtUfe9qL3Jzvlnbf7f7++nf7/fzoHumtjz93lmf1VdP7IHr3TfMH3YQNvYRRdL0z+/7dZbb3+3nzy6SXVRY8eD76veqzV91V3NbRmFbyvWna8wePFsfR4Wu541B/K/1qav9z5IJg/OR8UzbNPZNqF86wrv7+ieZa9TumN5rRV94bj92/e9dRLy4PzbO3YC754nj3a0JpTOM/K/b90cJ49F3dkfwTzr+3MdU1wniXXNc3nWTW6JLOl/DxrvB79enJ7Rya+N3mHeKp1n179+ltn+tY8HZxnh1udZ3/Q0OornGflrm+Dz9P49e10X59/sK8/37frw+S/c6fr+nBdYPtUrw97J92ZqCP6IF4fBo4zANDMjx+683/Xt9P1f3ruTtf/P8w8ruy6MvvzUKlOrSuD+Q93Zr0SvE4dX69M93pruq+zp3e95To+kH/8feTpfl9oeteV1iFJO8reGWMdAgDA++Gif/O936hvp+v/8Z97S37//6W0nXm8dW4g/1lb5073+yTW0bn5O/TzFcXvg033+1TeB/A+QDHvAwAAfDhs2rp7aGjPri03Dm3atmPb3vHtXaMrp8k/p/p3k9u1mTxFPz+dFz+rSfw3g/kbx/PZQHxIbfRnXqPohhu/c/mmm4Zun2r9of6K6s+Lb1Z/dn0Rqn9VID6kbP2h/orqz4tvVv/VwfyN4/lcID6kbP2h/orqz4tvVv+3gvkbx/PrgfiQsvWH+iuqPy++Wf3Z3wcL1f/5QHxI2fpD/RXVnxffrP5rgvkbx/OFQHxI2fpD/RXVnxffrP5rg/kbx/P3AvEhZesP9VdUf158s/qvC+ZvHM/qQHxI2fpD/RXVnxffrP5vB/M3jmcwEB9Stv5Qf0X158U3q39DMH/jeP5+ID6kbP2h/orqz4tvVv/1wfyN4/liID6kbP2h/orqz4tvVv9vBvM3jucfBOJDytYf6q+o/rz4ZvVvDOZvHM9vBOJDytYf6q+o/rz4ZvX/VjB/43i+FIgPKVt/qL+i+vPim9W/KZi/cTxfDsSHlK0/1F9R/XnxzerfHMzfOJ5/GIgPKVt/qL+i+vPim9W/JZi/cTxfCcSHlK0/1F9R/Xnxzeq/IZi/cTxfDcSHlK0/1F9R/Xnxzeq/MZi/cTxfC8SHlK0/1F9R/XnxzerPft5hqP5/FIgPKVt/qL+i+vPim9U/FMzfOJ41gfiQsvWH+iuqPy++Wf1bg/nzPzcgGx9Stv5Qf0X158U3q//mYP7G8XwjEJ9xTfqJeWXrD/VXVH9efLP6vxPM3zieqwLxIWXrD/VXVH9efLP6twXzN45nbSA+pGz9of6K6s+Lb1b/bwfzN47nm4H4kLL1h/orqj8vvln9twTzN45nXSA+pGz9of6K6s+Lb1b/9mD+xvFcHYgPKVt/qL+i+vPim9V/azB/43i+FYgPKVt/qL+i+vPim9W/I5i/cTzrA/EhZesP9VdUf158s/p3BvM3jueaQHxI2fpD/RXVnxffrP5dwfyN47k2EB9Stv5Qf0X158U3q/+2YP7G8VwXiA8pW3+ov6L68+Kb1b87mL9xPN8OxIeUrT/UX1H9efHN6t8TzN84ng2B+JCy9Yf6K6o/L75Z/XuD+RvHc30gPqRs/aH+iurPi29W/75g/sbx/GYgPqRs/aH+iurPi29W/+3B/I3j2RiIDylbf6i/ovrz4pvVvz+Yv3E8vxWIDylbf6i/ovrz4pvVn/0cyFD9mwLxIeP17909NLRp366btuwd2rRj501Dezbt371t796h5EKt7O+VhX8v6H3+RRaaanh9jE2SbTv2DO2efPye2XT+1s+JaPTXnmaO3cYfayk++7HX7c6ac2W+d0W1pvvr/Ex7XvJ5tPMCn3ucjU/TLh69M/nzaLPd1go+x7Xo+JTtP3R8ipvE5x1fQ8ezovPflI9/hfO7p2n92c3dyS/2dccfbSk+avL33Vqbr+V+7zQ4X19rbb5mP3e9aL5m46c6X3tLztds/6H5VGkS3+x6qNX5uiEQn2p9fsbBevPm1VT/zmCadkp/ZzDzZZI2/pZB66+Hcr9HHnw9JIMuej1kf4+76PWQjZ/q62FmyddDtv+i10NefLP1cauvh2sD8SGtz4dWPrcgnfWTP7cgOB9WtDYfsn/Hqmg+ZOOnOh96Ss6HbP9F8yEvvtn7ha3Oh28F4lvV+vwo97kiwfmxubX5kf17EkXzIxs/1fkRl5wf2f6L5kdefLP/T2l1fnwzEJ9qOH9u3TO6qN+2Zfu2A5kfwOhLzp9TPB92RVHU0fPhWTkv//Xn/+K9sS/JOCqTxlF0PRFnxjE/Gcn80N89DIz7xv/yb9f/8JcPfC+KVny0uiQ87okhT3zJiAeHF9y17NnrPnb8iyPjrzQd/3hk+neLC/7ecTY+rae2feeevb+2dee+Ha3+xFVz6eehVMbb0/R5KMnGaoufbxL6fYKpfr5J16Q756aWP98E4ENi3uHn5tS308//S89H/cmxb2ZyAEy3t36dXe7z9YLX2Ydau85enq234Do7G5/W2+p1dqXkdXa2/6Lr7Lz4Zj+31+p19jcC8VPVOE9GJsjo/BjatH/n7vqfiZvuv1vb+fFO79/xLT++6f3cxna1Pv7p/VzI6R//9P4d4Okf//T+ned2nbX1UvJhkUWfH1m0jgr9XvpU11EzJt05N1lHAcC575/tfvtf17fT9X+yih1f/383aVc73P90r6Ome1053dfJH/zP35/edZD1QJPOzgHWAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5/uC//6cf1Le7a/2jt6/87p53v3H+l35879Cpu77yx7fec96fLHy37741X39o1Zd/svlP5w8uXTZ05fePXHX/fS9+4ZcvPvbEmsKO+sZuLkmaPVEU/2UcRUvfPvLY/S//2Xkj2+KR/uO+u6P58+MFP5gfZzKsOB1F0U3j42z85pFTK7eO3N7z3e6G7fMySbJ1Rb3VdDwN44zuKKyID6CeZJ4d3HTDU8duGXz5yMCulT8/ecXOuydC4p66+RRFczfXP74riqKZyb8R6WzrTx+c3K6NomhW3eM+WzCui1sc/6WB9pLkdkZy21uQJ/3+RZl2rcVx1DK33S0+rl2Vac6fld1/2YPRdEnrnJvcPp/cXjLFPNX0XxxV4qg2Pvzt8cQcieqetziKR+d2z3i7MtqOxttRth1n2pVMu9qVqWu032THVuO4cXsal9meHo5ryfaL6o/VOdYFti9KbnuSF+p7aTvK3hnTO+nORB1R3bhOnK2JEVAJvPbS7ePDS56M3mRbb7xg0mOGc6TfO/GjLRveeePA832BccTPxUn+uK38g0NPHnv2uqOL+kP5N1eS/JW28r9SffX0Myf7ZwfzH0rzV9vKv/5XP3vw3qv3LwzunxPp/qm1lX/Zw7MPntq/rnsglP9wmr+nrfxXbly66oKT+24Pjn9Fun9mtpX/p48sP7Px0AtHg/mjNP+stvK/+eTTS6qLHj0ezH8s3T+9beW/ZuXjq7+2+L4ngvv/tTT/nLbybzh+/+ZdT720PDg/16b7p6+t/KdXv/7Wmb41T4eOnfHhs32GBfhw+UhyjfVg0m53nVlW3Xrh8YHa2DXf7OTfnE52lBHXrV0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBk53B1X337raMPXfWd/7Hpv9XiKIoDjxnOkX6vOmNwcKCNcSx7ePbBU/vXdaftkb7728gDAAAATLb4zQduq2+n6/BK0o6jnqg/2h/PjBbnPj59j2Bx2oobt2ffQ5g5EdmRPJUO5al2KE+tQ3m6OpRnRofydHcoT09Bnp6otTwzm+aptDyeWR3K09uhPLM7lGdOh/LM7VCeeR3K09c0T+vzcH6H8izoUJ6PdCjPwg7l+WiH8nysQ3nO61Ce7HvKU52Hc5LI80N5Ru9UC/PU4ur4N/LeT0/7uaBkP70t9pN9z36q/cxssZ+LS/bT02I/nyzZT9xiP8szj6tMsZ9KQT/pvL0jVE/aanH+39mhPAdK5Km/BjjYofH8Tofy/OMO5fknHcpzV8k8ACG/9+Ilf1jfTtf/6fozjvqi7trl0azkiJN9FyBd7144+nXy+S50QErzLcls7yrKl11gZ/JdONXxZd9AyOT7eNN8tUnr1Zx8tfp8yzqUDwAAAKbin54+2PBfc5PX//1Rd23h+Pr1E5nHF67Xs/+RnUjzXdKhfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9m199i4yuwA4N/1jGem5hGDkjAhLytJCQiRB1GqQlsYRSoSVcGhNOERITcFgyNMAnECJG0VClUTWaKiDX3w+qOBogqhAhJSROtKrGAX7R8bbcSy4rFegxfBP2hhyQsIu7Maez77ejyDzeySbHZ/P6E7c+495zvfvUiRzh0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCb74f/+rNX0/HwQH9nz1DXYEhC5b+6ynXEa5lcqdTRxD4+eW3jjT99a+f+GFd657NNLAQAAABM8vxlc85Px3EOj6N3Egohn10Z8kluQl2x+h6gWI1b2kc/FywLqzP7f//KpNQyEp+dnDWhrlCtK1TjTLWub8fO2zf29nZv/Qa/VPrU3kftfpIQRl5fLDgzrFu2+5UDScfofbRNcR8t1brl2+64c3nfjp0Xbbpj423dt3VvXrVq9SUrV628+JJVy2/d1Nu9YvQY8lOsF0IoTXwuU/yPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE2DXd/f/QzoeHujv7BnqGmxLQkga1JTriNcyuVKpo4l9vPPYk/Mycx4+GONK73y2iYUAAACASb71/JzL03Gcw+PonYRCyGdzIRPmjMSLxlOzIZTL8fySmvMnYu8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCJdeho54/T8fBAf2fPUNfgaUkISYOach3xWiZXKnU0sY/1q/7j8j+b+8CjMa70LjaxDgAAADDZG+e3PpCO4xzeUo2TUAjFsDi0JnMm1MV3A+fWrFebF9eZP8282ncHjfIWTzPvvGnmXTBF3tXVz3sDAAAAnHpuaP/e+nQc5//WapyE9pDPFkOmGk81x8f3Agtr8mL9VPN9rF/UoH6quT/W1879AAAA8Lvsog9f+DIdT57/iyGfLYzN31P9nn5V9dPv5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAI98+euX/pePhgf7OnqGuwUwSQtKgplxHvJbJlUodTexj3S8+2HP/tffMjHGldz7bxEIAAADAJM/m/vCedBzn8Dh6J6EQ8tm20BpOG5n738vNmLnp7+fODyGURhJyuXDvxm3btl48eox5f5Hs+5OldwxcOClv5ejxxN8pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwq1r1zN4N6Xh4oL+zZ6hr8PeSEJIGNeU64rVMrlTqaGIfb+y94PhND700EONK72IT6wAAAACTzet9+SfpOM7hcfZPQiEUQy7kwuyROD3rV7TUrNfonQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw26Nvx87bN/b2dm/1xRdffBn7crL/ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6W/938Lx+n4+GB/s6eoa7BQhJC0qCmXEe8lsmVSh1N7OMPblpwyfzD2++OcaV3sYl1AAAAgMk2fLT9cDqOc3ic/ZNQCMXQGlrDrGo82cj8334idgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxMC0MSyl/TOWtP9q4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAb8KRN9c9lo6HB/o7e4a6Bs9IQkga1JTriNcyuVKpo4l93HjwH//qzn2vXhDjSu98tomFAAAAgElaP3zzr9NxnMPj6J2EQshn54V8mFc90ztxgSQTE+u+Fxiv+9sJZZlp1+2p2fHozgrV9xCFsX2GkdcO43UPfWVdsXq2pX16zwkAAABOZbP2XP136TjO/63VOAntIZ+dlZqr75xQ3zbtOf7hCXVnTLvuvyfUtU9R92t4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAkx5c+9o56Xh4oL+zZ6hrMElCSBrUlOuI1zK5UqmjiX2Uuh97+enrB+bEuNK72MQ6AAAAwGTXflD453Qc5/A4+yehEIphfjgzzB+Z+0P7xPqYd1rp+2+v2f/WDSGsmP36gmzDfv9+4LqPw7E/fu+z0cNIGELLxKSWEGZU+yUN+t38g2fWvfLl7idCWDErM69xv/FW44caSal89q4lT18/++CahssAAADAKa3w5JH/Ssdx/o8TdRLaQz67ueH8H/O+1vzf2Td318zqsfoGoKaipb3ar6VBv/5Pn+g4uuEvj1bm/9cXFMb+VuD8xRPz063Sx5p3DkmpvPCF89YfP3LXNaMnYv9Mg/4bWhedtfejuYti/0L1/C1huv1DTf++rmOLl7WdfsXE/iGEjnr9//PK5z9f9+inN4z2b/y8l/9o+E9nhi3/VuiNx9Ezk/uvfXz13p2592dM7J806L/01RcPP3fvugdr7//cbL3+k481Kl2z5f5D9y+9b033pan+LQ36393xzif/9D///1Sl/6GFbWP9l37F/U/Z/8DiPYf27X5kw8TnX6rX/+aLtr64Y9OND9Xef1vNwuknnz5Ofv7vzkuu2t739tbaSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKe2rue+OJaOhwf6O3uGugZbkhCSBjXlOuK1TK5U6mhiH9/JHPjiqcPF02Nc6V1sYh0AAABgsmvWvHtbOo5zeJz9k1AIxZALudA2MvefvWvJ09fPPrgmtFevVz+zvVv6tl1465btm2850bcAAAAATGHfZZ+vScdx/s9W4yS0h3x2SWitzv9rH1+9d2fu/Rlx/g8hjPzcn711U2/3ijD2nqCv69jiZW2nXxHzMtXPQiVv2c1bequvCeK6Lz37Rysvve7asfyWdP7F43kLXzhv/fEjd11TN2/VeN6785Krtve9vTW1z9JY3srxvP5D9y+9b033pfE+kupnoXo/Me/A4j2H9u1+ZEPMawmjf/LQVl0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjhrM9+/jfpeHigv7NnqGswZEJIGtSU64jXMrlSqaOJfXxx+evDx9v//MkYV3rns00sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8kh04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs109oHFUcB/D3drdm203rphaaaA0p9tKCUAgWe5Dm4h8kaqkoWihGMV5ULIhW7MG2wVDUQ0Ghpb2UVjwrORS1h1hsFQWxigfxpKAnlRySIqmoJJm32Uw7JI62lPL5wPD292bnO2/evp3dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGva4z/eW2uvO2rds+2511+88ODNd39xYHjqtfs+en7/2o/XXGiODD7wxtZ7vhn6vGugd8Pwlg/GHhodOXPXn2cOHx1c9ESvzDWbsrIeQvwthtD789jh0bNfrp3pizPnj819oasrrv6kK+YSNk+HEJ5ujXPhzrGp/mdm2v1vdizovzEXkr+u0Kim8cxpLhwv15d6ts72PvHUifFnB86O9e3u/3Xyjhf2zb8l1tvWUwirhtqPXxZCWJ5tM9Jq604HZ+32EMKKtuPuXGRcty1x/LcX1Ouy9oasbSySk/avz9W1JY6jlms7lnhcWZUrnJ+Xn7/8zehKSde5KmtPZe2mf5lTTVsMlRhqreE/F+fXSGj73GKIs2u73qors3Vo1SFfx1xdydXVZbnrmj1vNrHVGBf2p/fl+tPtuJb1r2+/V1/GjoL+nqytZ1/UP1Id8i/mNC55MX8doW1cE1drYRSoFHz3Un9reNmH0cj6GnH1Jcf8fRlp38RnT+78/ftXTzULxhHfj1l+LJU/MHxs/L3HTvd0F+UPVbL8Sqn8c9Wvpt+d7O4szD+U8qul8h/565eDBx7es6ZwfibS/NRK5W94q3Pv1J4dHX1F+cdTfr1U/pZdvVtvnXzp5cLxb07zs7xU/ndvb7y469CHpwvzQ8pfUSr/h2Mn11V73jlfmD+e5qdRKv/R/iPb7r9l5Gjh/H+d8leWyt95fnRo94lPNxauz+1pfpql8qe3ffvTxebgyaJ7Zzx+tX9hAa4vN2X/sQ5mddnnzP+q7XnhSF9t7j9fZ7at/D9PlBPbnl0A/mEHjgUAAAAAhPlbd2WxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADACgAA//+3e18c") syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES8, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x4, 0x1a2, &(0x7f0000000000)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="e1", 0x1}], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1243826, 0x0) 6.109100578s ago: executing program 5 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7c, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x18) 5.315221463s ago: executing program 2 (id=298): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000002c0)=r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f0000000000), 0x10) 4.931666763s ago: executing program 5 (id=299): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) io_setup(0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x1, 0x2, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)="d6", 0x1}], 0x1) 3.091465741s ago: executing program 5 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3.002498243s ago: executing program 5 (id=301): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x8000, 0x0, 0x1000000}, 0x1c) 2.379653018s ago: executing program 5 (id=302): r0 = socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 0s ago: executing program 5 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'macvlan0\x00', &(0x7f0000000fc0)=@ethtool_per_queue_op={0x4b, 0x41, [0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x55}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.22' (ED25519) to the list of known hosts. [ 72.699464][ T5080] cgroup: Unknown subsys name 'net' [ 72.871645][ T5080] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.440078][ T5080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.993744][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.002799][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.010583][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.018822][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.031257][ T5093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.038635][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.103382][ T4487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.120651][ T4487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.128234][ T4487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.148663][ T4487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.170613][ T4487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.178076][ T4487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.217627][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.226507][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.234154][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.242105][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.249421][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.256895][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.277776][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.286025][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.293896][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.301721][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.311178][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.319732][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.326972][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.341939][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.361027][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.371134][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.379037][ T5099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.386685][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.402340][ T4487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.418523][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.429233][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.444034][ T4487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.452480][ T4487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.459877][ T4487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.856739][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 78.178864][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 78.236590][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.244149][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.252497][ T5094] bridge_slave_0: entered allmulticast mode [ 78.259802][ T5094] bridge_slave_0: entered promiscuous mode [ 78.342499][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.349682][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.357112][ T5094] bridge_slave_1: entered allmulticast mode [ 78.365253][ T5094] bridge_slave_1: entered promiscuous mode [ 78.447130][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 78.498214][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.515425][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.524779][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 78.545422][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 78.556918][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.565315][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.572520][ T5090] bridge_slave_0: entered allmulticast mode [ 78.579739][ T5090] bridge_slave_0: entered promiscuous mode [ 78.643216][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.650826][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.658026][ T5090] bridge_slave_1: entered allmulticast mode [ 78.665462][ T5090] bridge_slave_1: entered promiscuous mode [ 78.687975][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 78.728045][ T5094] team0: Port device team_slave_0 added [ 78.807382][ T5094] team0: Port device team_slave_1 added [ 78.867643][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.881174][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.987760][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.994941][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.028614][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.043818][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.050963][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.077037][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.101180][ T4487] Bluetooth: hci0: command tx timeout [ 79.117150][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.125048][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.132744][ T5100] bridge_slave_0: entered allmulticast mode [ 79.140105][ T5100] bridge_slave_0: entered promiscuous mode [ 79.214185][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.221437][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.228569][ T5100] bridge_slave_1: entered allmulticast mode [ 79.236978][ T5100] bridge_slave_1: entered promiscuous mode [ 79.247706][ T5090] team0: Port device team_slave_0 added [ 79.260486][ T4487] Bluetooth: hci1: command tx timeout [ 79.289398][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.296655][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.304344][ T5097] bridge_slave_0: entered allmulticast mode [ 79.312522][ T5097] bridge_slave_0: entered promiscuous mode [ 79.334849][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.342083][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.349578][ T5102] bridge_slave_0: entered allmulticast mode [ 79.356951][ T5102] bridge_slave_0: entered promiscuous mode [ 79.382102][ T5090] team0: Port device team_slave_1 added [ 79.406974][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.416465][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.423935][ T4487] Bluetooth: hci4: command tx timeout [ 79.424140][ T4487] Bluetooth: hci3: command tx timeout [ 79.429652][ T53] Bluetooth: hci2: command tx timeout [ 79.436460][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.447657][ T5106] bridge_slave_0: entered allmulticast mode [ 79.455074][ T5106] bridge_slave_0: entered promiscuous mode [ 79.462705][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.469840][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.478025][ T5097] bridge_slave_1: entered allmulticast mode [ 79.485571][ T5097] bridge_slave_1: entered promiscuous mode [ 79.493288][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.500609][ T5099] Bluetooth: hci5: command tx timeout [ 79.506408][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.513735][ T5102] bridge_slave_1: entered allmulticast mode [ 79.521124][ T5102] bridge_slave_1: entered promiscuous mode [ 79.563374][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.604352][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.611716][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.618859][ T5106] bridge_slave_1: entered allmulticast mode [ 79.626836][ T5106] bridge_slave_1: entered promiscuous mode [ 79.678047][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.685832][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.711982][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.725333][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.732369][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.758587][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.821085][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.869625][ T5100] team0: Port device team_slave_0 added [ 79.883603][ T5094] hsr_slave_0: entered promiscuous mode [ 79.890469][ T5094] hsr_slave_1: entered promiscuous mode [ 79.899889][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.912093][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.925739][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.937786][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.952765][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.967670][ T5100] team0: Port device team_slave_1 added [ 80.107671][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.115169][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.141946][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.173240][ T5106] team0: Port device team_slave_0 added [ 80.221527][ T5090] hsr_slave_0: entered promiscuous mode [ 80.228040][ T5090] hsr_slave_1: entered promiscuous mode [ 80.235094][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.243188][ T5090] Cannot create hsr debugfs directory [ 80.253077][ T5102] team0: Port device team_slave_0 added [ 80.259910][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.266941][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.293725][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.335432][ T5106] team0: Port device team_slave_1 added [ 80.345075][ T5097] team0: Port device team_slave_0 added [ 80.354768][ T5097] team0: Port device team_slave_1 added [ 80.363477][ T5102] team0: Port device team_slave_1 added [ 80.472304][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.479272][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.506014][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.526417][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.533555][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.560286][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.588006][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.595115][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.621747][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.654598][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.661602][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.687559][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.734054][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.742570][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.768821][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.797711][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.804953][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.831172][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.861686][ T5100] hsr_slave_0: entered promiscuous mode [ 80.868202][ T5100] hsr_slave_1: entered promiscuous mode [ 80.874809][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.882479][ T5100] Cannot create hsr debugfs directory [ 81.011816][ T5097] hsr_slave_0: entered promiscuous mode [ 81.018362][ T5097] hsr_slave_1: entered promiscuous mode [ 81.024996][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.033137][ T5097] Cannot create hsr debugfs directory [ 81.180542][ T5099] Bluetooth: hci0: command tx timeout [ 81.316105][ T5102] hsr_slave_0: entered promiscuous mode [ 81.332603][ T5102] hsr_slave_1: entered promiscuous mode [ 81.339010][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.348373][ T5102] Cannot create hsr debugfs directory [ 81.350402][ T5099] Bluetooth: hci1: command tx timeout [ 81.372409][ T5106] hsr_slave_0: entered promiscuous mode [ 81.386376][ T5106] hsr_slave_1: entered promiscuous mode [ 81.396238][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.409912][ T5106] Cannot create hsr debugfs directory [ 81.500530][ T5099] Bluetooth: hci2: command tx timeout [ 81.506015][ T53] Bluetooth: hci3: command tx timeout [ 81.510435][ T4487] Bluetooth: hci4: command tx timeout [ 81.580427][ T4487] Bluetooth: hci5: command tx timeout [ 81.733552][ T5094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.809348][ T5094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.868294][ T5094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.919255][ T5094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.121907][ T5097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.134391][ T5097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.164867][ T5097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.178468][ T5097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.279797][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.297724][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.308419][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.334383][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.459625][ T5100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.474868][ T5100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.486965][ T5100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.506767][ T5100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.595991][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.665317][ T5106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.682704][ T5106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.699000][ T5106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.751035][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.762358][ T5106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.808035][ T5102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.857700][ T5102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.868826][ T5102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.888772][ T5102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.908430][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.915756][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.951795][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.958945][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.057260][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.096021][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.186666][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.204999][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.216380][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.254185][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.261541][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.271617][ T4487] Bluetooth: hci0: command tx timeout [ 83.324305][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.364593][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.371832][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.384426][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.391592][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.401777][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.408891][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.438367][ T4487] Bluetooth: hci1: command tx timeout [ 83.466514][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.473721][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.519530][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.536141][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.543351][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.582630][ T4487] Bluetooth: hci4: command tx timeout [ 83.588054][ T4487] Bluetooth: hci3: command tx timeout [ 83.596492][ T53] Bluetooth: hci2: command tx timeout [ 83.664832][ T4487] Bluetooth: hci5: command tx timeout [ 83.767401][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.859938][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.885764][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.892961][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.936043][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.943230][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.977332][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.082866][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.105802][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.113010][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.238947][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.282299][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.289446][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.418732][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.629803][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.688346][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.736747][ T5100] veth0_vlan: entered promiscuous mode [ 84.828455][ T5100] veth1_vlan: entered promiscuous mode [ 84.995686][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.043047][ T5100] veth0_macvtap: entered promiscuous mode [ 85.106740][ T5090] veth0_vlan: entered promiscuous mode [ 85.120273][ T5094] veth0_vlan: entered promiscuous mode [ 85.137717][ T5100] veth1_macvtap: entered promiscuous mode [ 85.188566][ T5090] veth1_vlan: entered promiscuous mode [ 85.205226][ T5094] veth1_vlan: entered promiscuous mode [ 85.236258][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.331664][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.340566][ T4487] Bluetooth: hci0: command tx timeout [ 85.364041][ T5090] veth0_macvtap: entered promiscuous mode [ 85.389863][ T5100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.400874][ T5100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.409580][ T5100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.418430][ T5100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.433562][ T5090] veth1_macvtap: entered promiscuous mode [ 85.447789][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.455263][ T5106] veth0_vlan: entered promiscuous mode [ 85.475593][ T5094] veth0_macvtap: entered promiscuous mode [ 85.488911][ T5094] veth1_macvtap: entered promiscuous mode [ 85.501129][ T4487] Bluetooth: hci1: command tx timeout [ 85.518064][ T5106] veth1_vlan: entered promiscuous mode [ 85.614829][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.626396][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.637846][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.650150][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.661184][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.671770][ T4487] Bluetooth: hci3: command tx timeout [ 85.677183][ T4487] Bluetooth: hci2: command tx timeout [ 85.680050][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.683058][ T53] Bluetooth: hci4: command tx timeout [ 85.698592][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.712112][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.722160][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.735305][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.745495][ T53] Bluetooth: hci5: command tx timeout [ 85.747658][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.817668][ T5094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.827948][ T5094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.838212][ T5094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.847214][ T5094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.860890][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.871442][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.881647][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.892394][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.905029][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.920241][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.929175][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.938147][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.946939][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.995826][ T2799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.006649][ T2799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.010184][ T5106] veth0_macvtap: entered promiscuous mode [ 86.060287][ T5097] veth0_vlan: entered promiscuous mode [ 86.103328][ T5106] veth1_macvtap: entered promiscuous mode [ 86.126196][ T2852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.135656][ T2852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.197953][ T5102] veth0_vlan: entered promiscuous mode [ 86.226392][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.237324][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.247330][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.259229][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.269293][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.282222][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.302275][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.323124][ T45] cfg80211: failed to load regulatory.db [ 86.348154][ T5097] veth1_vlan: entered promiscuous mode [ 86.365799][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.376532][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.388234][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.400030][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.412757][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.423729][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.435684][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.508567][ T5106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.521001][ T5106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.529969][ T5106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.541709][ T5106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.555001][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.563593][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.607671][ T5193] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 86.618492][ T5102] veth1_vlan: entered promiscuous mode [ 86.643886][ T2799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.659275][ T2799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.748958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.767537][ T5102] veth0_macvtap: entered promiscuous mode [ 86.773829][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.806844][ T5102] veth1_macvtap: entered promiscuous mode [ 86.884171][ T5097] veth0_macvtap: entered promiscuous mode [ 86.908364][ T5195] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7'. [ 86.914411][ T2799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.922894][ T5097] veth1_macvtap: entered promiscuous mode [ 86.931199][ T2799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.024611][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.036970][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.051019][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.068384][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.087735][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.098505][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.117374][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.135274][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.149163][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.275210][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.298648][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.318371][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.350220][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.375848][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.396069][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.408067][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.423488][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.434182][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.445119][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.458714][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.479266][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.518822][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.556077][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.584525][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.634356][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.668022][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.678482][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.689853][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.699713][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.710165][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.023065][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.262437][ T5201] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.482110][ T5213] 9pnet_fd: Insufficient options for proto=fd [ 88.576233][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.607339][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.635251][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.646742][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.678361][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.712706][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.739277][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.800643][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.840425][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.898471][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.920648][ T5219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16'. [ 88.939415][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.997775][ T5102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.025636][ T5102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.044362][ T5102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.054988][ T5102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.119966][ T5220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 89.129248][ T5220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.136774][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.153782][ T5220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.161360][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.202507][ T5211] loop5: detected capacity change from 0 to 32768 [ 89.220967][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.222261][ T5097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.228784][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.291288][ T5097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.306284][ T5097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.315835][ T5097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.408571][ T5228] loop1: detected capacity change from 0 to 2048 [ 89.493545][ T5211] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 89.513314][ T5211] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 89.522014][ T5232] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.751243][ T5211] bcachefs (loop5): alloc_read... done [ 89.780674][ T5211] bcachefs (loop5): stripes_read... done [ 89.786499][ T5211] bcachefs (loop5): snapshots_read... done [ 89.834962][ T5211] bcachefs (loop5): journal_replay... done [ 89.841232][ T5235] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.865823][ T5211] bcachefs (loop5): resume_logged_ops... done [ 89.883606][ T5211] bcachefs (loop5): going read-write [ 90.090168][ T5211] bcachefs (loop5): done starting filesystem [ 90.098639][ T5242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.124095][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.178921][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.222059][ T2799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.446443][ T2799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.494683][ T5242] batadv_slave_0: entered promiscuous mode [ 90.865029][ T5211] syz.5.12 (5211) used greatest stack depth: 13488 bytes left [ 90.903273][ T2852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.960516][ T2852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.990094][ T5094] bcachefs (loop5): shutting down [ 91.061831][ T5241] batadv_slave_0: left promiscuous mode [ 91.069179][ T5094] bcachefs (loop5): going read-only [ 91.083958][ T5094] bcachefs (loop5): finished waiting for writes to stop [ 91.133794][ T5094] bcachefs (loop5): flushing journal and stopping allocators, journal seq 13 [ 91.194032][ T5094] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 15 [ 91.230519][ T5094] bcachefs (loop5): shutdown complete, journal seq 16 [ 91.241979][ T5094] bcachefs (loop5): marking filesystem clean [ 91.282788][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.294837][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.276865][ T5094] bcachefs (loop5): shutdown complete [ 92.793814][ T5265] loop4: detected capacity change from 0 to 2048 [ 92.982115][ T5268] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.086600][ T5265] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 93.113895][ T5267] loop0: detected capacity change from 0 to 4096 [ 93.152081][ T5267] ======================================================= [ 93.152081][ T5267] WARNING: The mand mount option has been deprecated and [ 93.152081][ T5267] and is ignored by this kernel. Remove the mand [ 93.152081][ T5267] option from the mount to silence this warning. [ 93.152081][ T5267] ======================================================= [ 93.229736][ T5271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.27'. [ 93.240291][ T5265] Remounting filesystem read-only [ 93.301063][ T5265] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 93.337540][ T5265] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 93.376450][ T5265] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 93.455501][ T5265] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 93.540054][ T5265] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 93.582097][ T5273] loop1: detected capacity change from 0 to 1024 [ 93.604990][ T29] audit: type=1800 audit(1720190344.196:2): pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 93.701979][ T29] audit: type=1800 audit(1720190344.296:3): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="loop0" ino=34 res=0 errno=0 [ 93.966296][ T5263] loop3: detected capacity change from 0 to 32768 [ 94.083597][ T5263] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.26 (5263) [ 94.118438][ T2799] hfsplus: b-tree write err: -5, ino 4 [ 94.250542][ T5263] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 94.317634][ T5262] loop2: detected capacity change from 0 to 40427 [ 94.330529][ T5263] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 94.339962][ T5263] BTRFS info (device loop3): using free-space-tree [ 94.392920][ T5262] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.434370][ T5262] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.544975][ T5262] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.579958][ T5191] IPVS: starting estimator thread 0... [ 94.638014][ T5298] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 94.680695][ T5300] IPVS: using max 16 ests per chain, 38400 per kthread [ 95.033731][ T5262] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.073772][ T5262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.556142][ T5090] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 95.612756][ T5320] loop5: detected capacity change from 0 to 2048 [ 95.723326][ T5320] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 95.756785][ T5320] UDF-fs: Scanning with blocksize 512 failed [ 95.868867][ T5320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.272703][ T5301] loop0: detected capacity change from 0 to 32768 [ 96.448495][ T5301] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 96.748966][ T5301] XFS (loop0): Ending clean mount [ 96.879193][ T5301] XFS (loop0): Quotacheck needed: Please wait. [ 97.546178][ T5301] XFS (loop0): Quotacheck: Done. [ 97.804515][ T5102] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 98.287276][ T5328] loop5: detected capacity change from 0 to 32768 [ 98.322706][ T5347] tmpfs: Bad value for 'mpol' [ 98.631067][ T5148] IPVS: starting estimator thread 0... [ 98.658485][ T5352] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 98.730790][ T5353] IPVS: using max 15 ests per chain, 36000 per kthread [ 98.906339][ T5355] loop0: detected capacity change from 0 to 4096 [ 99.320491][ T29] audit: type=1800 audit(1720190349.926:4): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="bus" dev="loop0" ino=34 res=0 errno=0 [ 99.484773][ T5343] loop3: detected capacity change from 0 to 40427 [ 99.580455][ T5343] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 99.641467][ T5343] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.762127][ T5343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.042116][ T5343] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.063631][ T5343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.474491][ T5359] loop4: detected capacity change from 0 to 32768 [ 100.501174][ T5359] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.49 (5359) [ 100.556813][ T5384] loop0: detected capacity change from 0 to 2048 [ 100.600386][ T5359] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 100.635990][ T5359] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 100.671913][ T5386] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.692752][ T5359] BTRFS info (device loop4): using free-space-tree [ 100.770061][ T5384] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 100.805955][ T5384] Remounting filesystem read-only [ 100.946674][ T5384] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 101.018410][ T5384] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 101.591904][ T5384] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 101.672681][ T5384] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 101.763593][ T5384] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 101.850496][ T29] audit: type=1800 audit(1720190352.436:5): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.57" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 101.968590][ T5369] loop1: detected capacity change from 0 to 40427 [ 102.010597][ T5369] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.034005][ T5369] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.084058][ T5097] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 102.142791][ T5369] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.478586][ T5369] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 102.506362][ T5369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.662165][ T5426] loop0: detected capacity change from 0 to 512 [ 102.804073][ T5426] EXT4-fs (loop0): 1 truncate cleaned up [ 102.832086][ T5426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.134310][ T5434] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 103.381268][ T5434] team0: Port device netdevsim0 added [ 103.935049][ T5436] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 103.987363][ T5102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.085238][ T5436] team0: Port device netdevsim0 removed [ 104.105360][ T5436] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 104.472335][ T5440] netlink: 64 bytes leftover after parsing attributes in process `syz.2.67'. [ 108.141177][ T5469] loop2: detected capacity change from 0 to 2048 [ 108.248070][ T5478] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.335567][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.374220][ T5473] loop1: detected capacity change from 0 to 4096 [ 108.438246][ T5469] Remounting filesystem read-only [ 108.466186][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.511732][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.571288][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.612930][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.641645][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.670044][ T29] audit: type=1800 audit(1720190359.276:6): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.65" name="bus" dev="loop1" ino=34 res=0 errno=0 [ 108.713054][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.734590][ T5485] netlink: 'syz.5.80': attribute type 10 has an invalid length. [ 108.742880][ T5469] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.761323][ T29] audit: type=1800 audit(1720190359.376:7): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.73" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 108.860491][ T5485] team0: Port device netdevsim0 added [ 108.880117][ T5487] netlink: 'syz.5.80': attribute type 10 has an invalid length. [ 109.037569][ T5487] team0: Port device netdevsim0 removed [ 109.067082][ T5487] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 111.694146][ T5525] libceph: resolve '. [ 111.694146][ T5525] #)|' (ret=-3): failed [ 113.100928][ T4833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.320532][ T4833] usb 6-1: Using ep0 maxpacket: 16 [ 113.348867][ T4833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.393926][ T4833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.450533][ T4833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.484105][ T4833] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 113.538455][ T4833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.570137][ T5532] loop2: detected capacity change from 0 to 40427 [ 113.578810][ T4833] usb 6-1: config 0 descriptor?? [ 113.617173][ T5532] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 113.652610][ T5532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.727064][ T5548] loop0: detected capacity change from 0 to 64 [ 113.741885][ T5532] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.946874][ T5532] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 113.963238][ T5532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.500916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.661595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.807349][ T5561] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(áá01777777777777777777777 [ 117.700427][ T5148] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.922017][ T5148] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 117.970547][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.991675][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.021478][ T5153] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.046287][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.090390][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.101910][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.140690][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.180832][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.230627][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.260395][ T5153] usb 4-1: Using ep0 maxpacket: 16 [ 118.304833][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.320544][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.350289][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.359289][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.408844][ T5153] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.442672][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.459848][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.475688][ T5153] usb 4-1: Product: syz [ 118.479874][ T5153] usb 4-1: Manufacturer: syz [ 118.515263][ T5153] usb 4-1: SerialNumber: syz [ 118.521116][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.578011][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.587888][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.596309][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.607198][ T5153] usb 4-1: config 0 descriptor?? [ 118.612410][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.636848][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.644825][ T5153] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.656071][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 118.663721][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.676874][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.690760][ T5153] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 118.709447][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.718239][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.734899][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.744003][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.768221][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.776986][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.791855][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.802211][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.816845][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.826009][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.838078][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.847756][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.882882][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.884943][ T4833] usbhid 6-1:0.0: can't add hid device: -32 [ 118.903572][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.920632][ T4833] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 118.926371][ T5148] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.980427][ T5148] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.026492][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.049175][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.072885][ T5148] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 119.100850][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.119501][ T5148] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 119.133389][ T5148] usb 5-1: Product: syz [ 119.137603][ T5148] usb 5-1: Manufacturer: syz [ 119.142997][ T5148] usb 5-1: SerialNumber: syz [ 119.144936][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.178172][ T5148] usb 5-1: config 0 descriptor?? [ 119.195664][ T5148] yurex 5-1:0.0: Could not find endpoints [ 119.432214][ T5593] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.495583][ T928] usb 5-1: USB disconnect, device number 2 [ 119.540770][ T5596] capability: warning: `syz.2.108' uses deprecated v2 capabilities in a way that may be insecure [ 119.573587][ T5148] usb 6-1: USB disconnect, device number 2 [ 119.574327][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.684585][ T5153] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 119.736812][ T5596] loop2: detected capacity change from 0 to 256 [ 119.882431][ T5596] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 119.963021][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.199483][ T5153] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 120.208235][ T5153] em28xx 4-1:0.0: board has no eeprom [ 120.276883][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.290510][ T5153] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 120.320399][ T5153] em28xx 4-1:0.0: dvb set to bulk mode. [ 120.329533][ T9] em28xx 4-1:0.0: Binding DVB extension [ 120.364168][ T5153] usb 4-1: USB disconnect, device number 2 [ 120.422133][ T5153] em28xx 4-1:0.0: Disconnecting em28xx [ 120.516910][ T9] em28xx 4-1:0.0: Registering input extension [ 120.578675][ T5153] em28xx 4-1:0.0: Closing input extension [ 120.698144][ T5153] em28xx 4-1:0.0: Freeing device [ 120.780596][ T53] Bluetooth: hci4: command tx timeout [ 121.174377][ T51] bridge_slave_1: left allmulticast mode [ 121.193841][ T51] bridge_slave_1: left promiscuous mode [ 121.222218][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.296546][ T51] bridge_slave_0: left allmulticast mode [ 121.317815][ T51] bridge_slave_0: left promiscuous mode [ 121.336520][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.905529][ T53] Bluetooth: hci4: command tx timeout [ 124.280687][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.360642][ T5148] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.556558][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 124.653818][ T5148] usb 3-1: Using ep0 maxpacket: 16 [ 124.682036][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.705957][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.750480][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.775482][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.806492][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.839782][ T5148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.879475][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.896586][ T5148] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 124.908881][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.928872][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.940563][ T53] Bluetooth: hci4: command tx timeout [ 124.946171][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.959929][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.971581][ T5148] usb 3-1: config 0 descriptor?? [ 124.976801][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.981846][ T5642] kexec: Could not allocate control_code_buffer [ 124.996488][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.011360][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.032194][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.040854][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.060600][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.082686][ T51] bond0 (unregistering): Released all slaves [ 125.083840][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.110897][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.130427][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.142991][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.158049][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.166905][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.182494][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.206368][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.254219][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.281079][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.312304][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.400447][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.763673][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.773863][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.788596][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.797955][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.832302][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.851818][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.888625][ T5658] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(áá01777777777777777777777 [ 125.907362][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.945539][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.002180][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.019303][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.064648][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.109571][ T9] usb 5-1: Product: syz [ 126.138498][ T9] usb 5-1: Manufacturer: syz [ 126.357583][ T9] usb 5-1: SerialNumber: syz [ 126.380619][ T9] usb 5-1: config 0 descriptor?? [ 126.396982][ T9] yurex 5-1:0.0: Could not find endpoints [ 126.735644][ T45] usb 5-1: USB disconnect, device number 3 [ 127.231046][ T53] Bluetooth: hci4: command tx timeout [ 127.866827][ T5585] chnl_net:caif_netlink_parms(): no params data found [ 128.380646][ T51] hsr_slave_0: left promiscuous mode [ 128.698166][ T51] hsr_slave_1: left promiscuous mode [ 128.955551][ T5700] binder: BINDER_SET_CONTEXT_MGR already set [ 128.983413][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.038592][ T5700] binder: 5698:5700 ioctl 4018620d 20000040 returned -16 [ 129.075050][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.178565][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.216976][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.424154][ T51] veth1_macvtap: left promiscuous mode [ 129.476494][ T51] veth0_macvtap: left promiscuous mode [ 129.508079][ T51] veth1_vlan: left promiscuous mode [ 129.539828][ T51] veth0_vlan: left promiscuous mode [ 130.301925][ T5148] usbhid 3-1:0.0: can't add hid device: -32 [ 130.308012][ T5148] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 130.338842][ T5148] usb 3-1: USB disconnect, device number 2 [ 131.121218][ T51] team0 (unregistering): Port device team_slave_1 removed [ 131.281178][ T51] team0 (unregistering): Port device team_slave_0 removed [ 132.421933][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.434214][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.512563][ T5742] binder_alloc: 5740: binder_alloc_buf, no vma [ 133.833869][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.995811][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.199492][ T5585] bridge_slave_0: entered allmulticast mode [ 134.385847][ T5585] bridge_slave_0: entered promiscuous mode [ 134.427828][ T5755] 9pnet_fd: Insufficient options for proto=fd [ 134.461902][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.492191][ T5148] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.525217][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.590673][ T5585] bridge_slave_1: entered allmulticast mode [ 134.623615][ T29] audit: type=1804 audit(1720190385.216:8): pid=5757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.153" name="/newroot/27/file0/bus" dev="hugetlbfs" ino=8939 res=1 errno=0 [ 134.668964][ T5585] bridge_slave_1: entered promiscuous mode [ 134.760453][ T5148] usb 2-1: Using ep0 maxpacket: 16 [ 134.763560][ T29] audit: type=1804 audit(1720190385.276:9): pid=5757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.153" name="/newroot/27/file0/bus" dev="hugetlbfs" ino=8939 res=1 errno=0 [ 134.789094][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.846189][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.885636][ T5148] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.929427][ T29] audit: type=1804 audit(1720190385.326:10): pid=5757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.153" name="/newroot/27/file0/bus" dev="hugetlbfs" ino=8939 res=1 errno=0 [ 134.970586][ T5148] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 135.021836][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.132298][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.161606][ T5148] usb 2-1: config 0 descriptor?? [ 135.644023][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.349198][ T5585] team0: Port device team_slave_0 added [ 136.433891][ T5781] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(áá01777777777777777777777 [ 136.448163][ T5585] team0: Port device team_slave_1 added [ 137.229903][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.309263][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.406371][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.421376][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.428342][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.455023][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.368400][ T5585] hsr_slave_0: entered promiscuous mode [ 138.491289][ T5585] hsr_slave_1: entered promiscuous mode [ 138.619700][ T5585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.680371][ T5585] Cannot create hsr debugfs directory [ 138.895492][ T5814] loop3: detected capacity change from 0 to 1024 [ 139.648451][ T5814] Invalid/unusable pipe [ 140.183745][ T5823] hfsplus: bad catalog entry type [ 140.260292][ C0] hrtimer: interrupt took 42410 ns [ 141.297582][ T5148] usbhid 2-1:0.0: can't add hid device: -32 [ 141.311008][ T5148] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 141.953039][ T2852] hfsplus: b-tree write err: -5, ino 4 [ 144.568431][ T5148] usb 2-1: USB disconnect, device number 2 [ 144.829276][ T5885] team_slave_0: entered promiscuous mode [ 144.835436][ T5885] team_slave_1: entered promiscuous mode [ 145.723300][ T5889] overlayfs: failed to clone lowerpath [ 145.892750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 145.997650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.050767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.171821][ T5885] team_slave_0: left promiscuous mode [ 146.177306][ T5885] team_slave_1: left promiscuous mode [ 146.350255][ T5899] autofs: Bad value for 'fd' [ 146.782629][ T4487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.793484][ T4487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.870477][ T4487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.891958][ T4487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.904596][ T4487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.275018][ T4487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.809372][ T5585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.343824][ T5585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.347216][ T4487] Bluetooth: hci6: command tx timeout [ 150.320900][ T5958] autofs: Unknown parameter '0x0000000000000000' [ 150.464808][ T5961] loop4: detected capacity change from 0 to 1024 [ 150.658949][ T5961] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.669988][ T5961] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 150.686379][ T5961] EXT4-fs (loop4): invalid journal inode [ 151.131053][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.173968][ T5585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.442191][ T4487] Bluetooth: hci6: command tx timeout [ 151.606792][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.876744][ T5585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.743803][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.465678][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.504334][ T4487] Bluetooth: hci6: command tx timeout [ 155.129780][ T5916] chnl_net:caif_netlink_parms(): no params data found [ 155.387363][ T68] bridge_slave_1: left allmulticast mode [ 155.432267][ T68] bridge_slave_1: left promiscuous mode [ 155.438212][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.532941][ T68] bridge_slave_0: left allmulticast mode [ 155.538621][ T68] bridge_slave_0: left promiscuous mode [ 155.577423][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.594406][ T4487] Bluetooth: hci6: command tx timeout [ 156.149614][ T5151] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.380855][ T5191] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.395584][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.419205][ T6016] loop3: detected capacity change from 0 to 32768 [ 156.420451][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.465414][ T5151] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 156.479303][ T6016] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 156.486964][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.532329][ T5151] usb 3-1: config 0 descriptor?? [ 156.582495][ T5191] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.603509][ T5191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.618606][ T5191] usb 6-1: Product: syz [ 156.623266][ T5191] usb 6-1: Manufacturer: syz [ 156.633303][ T6016] XFS (loop3): Ending clean mount [ 156.642642][ T5191] usb 6-1: SerialNumber: syz [ 156.661074][ T6016] XFS (loop3): Quotacheck needed: Please wait. [ 156.699688][ T5191] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 156.833415][ T6016] XFS (loop3): Quotacheck: Done. [ 156.938163][ T5105] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 157.023255][ T5151] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 157.109305][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.182789][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.245694][ T928] usb 6-1: USB disconnect, device number 3 [ 157.316076][ T68] bond0 (unregistering): Released all slaves [ 157.447714][ T5151] usb 3-1: USB disconnect, device number 3 [ 158.199028][ T5105] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 158.228039][ T5105] ath9k_htc: Failed to initialize the device [ 158.242927][ T928] usb 6-1: ath9k_htc: USB layer deinitialized [ 158.553540][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.599071][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.630550][ T5916] bridge_slave_0: entered allmulticast mode [ 158.638279][ T5916] bridge_slave_0: entered promiscuous mode [ 158.733723][ T5090] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 159.647328][ T6091] tty tty25: ldisc open failed (-12), clearing slot 24 [ 159.764167][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.790700][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.797960][ T5916] bridge_slave_1: entered allmulticast mode [ 159.847161][ T5916] bridge_slave_1: entered promiscuous mode [ 160.050372][ T68] hsr_slave_0: left promiscuous mode [ 160.097502][ T68] hsr_slave_1: left promiscuous mode [ 160.111383][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.118802][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.211581][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.235887][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.343239][ T68] veth1_macvtap: left promiscuous mode [ 160.381806][ T68] veth0_macvtap: left promiscuous mode [ 160.397683][ T68] veth1_vlan: left promiscuous mode [ 160.419278][ T68] veth0_vlan: left promiscuous mode [ 160.941537][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.5.225'. [ 161.165703][ T6103] loop4: detected capacity change from 0 to 32768 [ 161.400148][ T6103] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 161.438139][ T6103] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 161.554427][ T6103] bcachefs (loop4): alloc_read... done [ 161.580999][ T6103] bcachefs (loop4): stripes_read... done [ 161.586721][ T6103] bcachefs (loop4): snapshots_read... done [ 161.630585][ T6103] bcachefs (loop4): journal_replay... done [ 161.637474][ T6103] bcachefs (loop4): resume_logged_ops... done [ 161.644277][ T6103] bcachefs (loop4): going read-write [ 161.670716][ T6103] bcachefs (loop4): done starting filesystem [ 161.886997][ T29] audit: type=1804 audit(1720190412.496:11): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.227" name="/newroot/39/bus/bus" dev="loop4" ino=1073741829 res=1 errno=0 [ 162.124945][ T6103] syz.4.227 (6103) used greatest stack depth: 13264 bytes left [ 162.183445][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.199211][ T5097] bcachefs (loop4): shutting down [ 162.206383][ T5097] bcachefs (loop4): going read-only [ 162.213585][ T5097] bcachefs (loop4): finished waiting for writes to stop [ 162.229807][ T5097] bcachefs (loop4): flushing journal and stopping allocators, journal seq 19 [ 162.259105][ T5097] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 21 [ 162.293725][ T5097] bcachefs (loop4): shutdown complete, journal seq 22 [ 162.301678][ T5097] bcachefs (loop4): marking filesystem clean [ 162.420975][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.435233][ T5097] bcachefs (loop4): shutdown complete [ 162.447741][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.472445][ T9] usb 3-1: Product: syz [ 162.487464][ T9] usb 3-1: Manufacturer: syz [ 162.501025][ T9] usb 3-1: SerialNumber: syz [ 162.533197][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.567602][ T5148] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.590785][ T68] team0 (unregistering): Port device team_slave_1 removed [ 162.771783][ T68] team0 (unregistering): Port device team_slave_0 removed [ 162.859781][ T928] usb 3-1: USB disconnect, device number 4 [ 163.680603][ T5148] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 163.705162][ T5148] ath9k_htc: Failed to initialize the device [ 163.773463][ T928] usb 3-1: ath9k_htc: USB layer deinitialized [ 165.752364][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.772265][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.795184][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.982640][ T5916] team0: Port device team_slave_0 added [ 166.072679][ T5916] team0: Port device team_slave_1 added [ 166.313709][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.393426][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.420737][ T6221] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 166.451977][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.484542][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.5.242'. [ 166.560582][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.590415][ T5185] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 166.604835][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.637789][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.760251][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.807164][ T5185] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.057948][ T5185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.415566][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.430842][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.538507][ T5185] usb 4-1: Product: syz [ 167.560364][ T5185] usb 4-1: Manufacturer: syz [ 167.564989][ T5185] usb 4-1: SerialNumber: syz [ 167.608830][ T5185] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.649729][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.656954][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.700625][ T45] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.256391][ T68] IPVS: stop unused estimator thread 0... [ 169.102038][ T5916] hsr_slave_0: entered promiscuous mode [ 169.276311][ T5916] hsr_slave_1: entered promiscuous mode [ 169.590486][ T5916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.598197][ T5916] Cannot create hsr debugfs directory [ 170.821315][ T6267] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 171.081047][ T6269] binder: BINDER_SET_CONTEXT_MGR already set [ 171.102724][ T6269] binder: 6268:6269 ioctl 4018620d 20000040 returned -16 [ 172.233226][ T5585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.289990][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.961585][ T5585] veth0_vlan: entered promiscuous mode [ 175.991229][ T6322] binder: BINDER_SET_CONTEXT_MGR already set [ 175.997241][ T6322] binder: 6321:6322 ioctl 4018620d 20000040 returned -16 [ 176.094329][ T5585] veth1_vlan: entered promiscuous mode [ 176.352865][ T5585] veth0_macvtap: entered promiscuous mode [ 177.739634][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'. [ 178.286580][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.296575][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.306038][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.315891][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.324096][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.332066][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.970042][ T6325] loop5: detected capacity change from 0 to 40427 [ 179.033293][ T6325] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 179.088368][ T6325] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 179.173551][ T6325] F2FS-fs (loop5): invalid crc value [ 179.281334][ T6325] F2FS-fs (loop5): Found nat_bits in checkpoint [ 179.901667][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.911878][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.927203][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.938101][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.952030][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 179.959476][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.123905][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.133070][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.141905][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.169361][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.178875][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.186831][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.780632][ T53] Bluetooth: hci3: command tx timeout [ 182.105978][ T53] Bluetooth: hci7: command tx timeout [ 182.327394][ T53] Bluetooth: hci0: command tx timeout [ 182.885932][ T53] Bluetooth: hci3: command tx timeout [ 182.902155][ T6366] loop2: detected capacity change from 0 to 32768 [ 183.494822][ T6376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.283'. [ 183.727136][ T6366] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=gzip,background_compression=gzip,str_hash=crc64,nojournal_transaction_names,nocow [ 183.771573][ T6366] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 183.845756][ T6366] bcachefs (loop2): alloc_read... done [ 183.871443][ T6366] bcachefs (loop2): stripes_read... done [ 183.896213][ T6366] bcachefs (loop2): snapshots_read... done [ 183.931037][ T6366] bcachefs (loop2): going read-write [ 183.951339][ T6366] bcachefs (loop2): journal_replay... [ 183.990004][ T6366] bcachefs (loop2): bch2_journal_replay(): error ERESTARTSYS [ 184.054218][ T6366] bcachefs (loop2): bch2_fs_recovery(): error ERESTARTSYS [ 184.075639][ T6366] bcachefs (loop2): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 184.100446][ T928] bcachefs (loop2): going read-only [ 184.105988][ T6366] bcachefs (loop2): shutting down [ 184.111287][ T928] bcachefs (loop2): finished waiting for writes to stop [ 184.118427][ T928] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 184.145678][ T4487] Bluetooth: hci7: command tx timeout [ 184.180262][ T928] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 184.206288][ T928] bcachefs (loop2): unshutdown complete, journal seq 10 [ 184.229707][ T928] bcachefs (loop2): done going read-only, filesystem not clean [ 184.328376][ T6366] bcachefs (loop2): shutdown complete [ 184.383523][ T4487] Bluetooth: hci0: command tx timeout [ 184.940463][ T4487] Bluetooth: hci3: command tx timeout [ 186.220439][ T4487] Bluetooth: hci7: command tx timeout [ 186.461009][ T4487] Bluetooth: hci0: command tx timeout [ 187.291865][ T4487] Bluetooth: hci3: command tx timeout [ 187.465481][ T6393] loop5: detected capacity change from 0 to 64 [ 188.300645][ T4487] Bluetooth: hci7: command tx timeout [ 188.541769][ T4487] Bluetooth: hci0: command tx timeout [ 189.709798][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 192.420141][ T6412] loop2: detected capacity change from 0 to 32768 [ 192.773796][ T6412] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=gzip,background_compression=gzip,str_hash=crc64,nojournal_transaction_names,nocow [ 192.804169][ T6412] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 192.865888][ T6412] bcachefs (loop2): alloc_read... done [ 192.890569][ T6412] bcachefs (loop2): stripes_read... done [ 192.935402][ T6412] bcachefs (loop2): snapshots_read... done [ 192.990143][ T6412] bcachefs (loop2): going read-write [ 193.008476][ T6412] bcachefs (loop2): journal_replay... done [ 193.500074][ T6412] bcachefs (loop2): resume_logged_ops... done [ 193.530510][ T6412] bcachefs (loop2): delete_dead_inodes... done [ 193.566907][ T6412] bcachefs (loop2): done starting filesystem [ 194.231107][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.237566][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.342005][ T5106] bcachefs (loop2): shutting down [ 194.347679][ T5106] bcachefs (loop2): going read-only [ 194.357427][ T5106] bcachefs (loop2): finished waiting for writes to stop [ 196.670207][ T5106] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 196.686054][ T5106] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 196.698027][ T5106] bcachefs (loop2): shutdown complete, journal seq 13 [ 196.732740][ T5106] bcachefs (loop2): marking filesystem clean [ 197.180844][ T5106] bcachefs (loop2): shutdown complete [ 197.948050][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.302'. [ 200.392701][ T6447] program syz.5.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.020847][ T5099] Bluetooth: hci2: command 0x0406 tx timeout [ 201.035527][ T5099] Bluetooth: hci5: command 0x0406 tx timeout [ 201.182467][ T5103] Bluetooth: hci1: command 0x0406 tx timeout [ 205.919587][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.956829][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.964990][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.976874][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.985029][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.993084][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.107349][ T5093] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 206.120621][ T5093] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 206.128371][ T5093] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 206.137081][ T5093] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 206.145084][ T5093] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 206.152537][ T5093] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 208.070941][ T5093] Bluetooth: hci4: command tx timeout [ 208.233163][ T5093] Bluetooth: hci8: command tx timeout [ 210.150904][ T5093] Bluetooth: hci4: command tx timeout [ 210.321439][ T5093] Bluetooth: hci8: command tx timeout [ 210.476710][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 210.491092][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 210.498877][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 210.508278][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 210.516456][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 210.524314][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 212.230717][ T5093] Bluetooth: hci4: command tx timeout [ 212.380689][ T53] Bluetooth: hci8: command tx timeout [ 212.550649][ T5093] Bluetooth: hci9: command tx timeout [ 214.319138][ T5093] Bluetooth: hci4: command tx timeout [ 214.470504][ T5093] Bluetooth: hci8: command tx timeout [ 214.630519][ T5093] Bluetooth: hci9: command tx timeout [ 216.710778][ T5093] Bluetooth: hci9: command tx timeout [ 218.790435][ T5093] Bluetooth: hci9: command tx timeout [ 238.066522][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 238.075909][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 238.085061][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 238.094562][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 238.103308][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 238.125434][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 239.836700][ T4487] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 239.851254][ T4487] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 239.859517][ T4487] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 239.875055][ T4487] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 239.883419][ T4487] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 239.891019][ T4487] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 239.925074][ T4487] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 239.936690][ T4487] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 239.950513][ T4487] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 239.959467][ T4487] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 239.971238][ T4487] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 239.978721][ T4487] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 240.230581][ T4487] Bluetooth: hci10: command tx timeout [ 241.990850][ T4487] Bluetooth: hci11: command tx timeout [ 242.070662][ T4487] Bluetooth: hci12: command tx timeout [ 242.310554][ T4487] Bluetooth: hci10: command tx timeout [ 244.076194][ T4487] Bluetooth: hci11: command tx timeout [ 244.150898][ T4487] Bluetooth: hci12: command tx timeout [ 244.390587][ T4487] Bluetooth: hci10: command tx timeout [ 246.150498][ T4487] Bluetooth: hci11: command tx timeout [ 246.230702][ T4487] Bluetooth: hci12: command tx timeout [ 246.470530][ T4487] Bluetooth: hci10: command tx timeout [ 248.230465][ T4487] Bluetooth: hci11: command tx timeout [ 248.310747][ T4487] Bluetooth: hci12: command tx timeout [ 255.520009][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.527658][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.389408][ T5093] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 266.410504][ T5093] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 266.424804][ T5093] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 266.433471][ T5093] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 266.441888][ T5093] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 266.452280][ T5093] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 266.459788][ T5093] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 266.467645][ T5093] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 266.477005][ T4487] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 266.486717][ T4487] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 266.509267][ T5093] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 266.518351][ T5093] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 268.541170][ T5093] Bluetooth: hci13: command tx timeout [ 268.630467][ T5093] Bluetooth: hci14: command tx timeout [ 270.514118][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 270.525077][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 270.533713][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 270.542351][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 270.550298][ T53] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 270.557779][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 270.631006][ T5093] Bluetooth: hci13: command tx timeout [ 270.710358][ T5093] Bluetooth: hci14: command tx timeout [ 272.635951][ T5093] Bluetooth: hci15: command tx timeout [ 272.710551][ T5093] Bluetooth: hci6: command 0x0406 tx timeout [ 272.716693][ T5093] Bluetooth: hci13: command tx timeout [ 272.793344][ T5093] Bluetooth: hci14: command tx timeout [ 274.710431][ T53] Bluetooth: hci15: command tx timeout [ 274.790465][ T53] Bluetooth: hci13: command tx timeout [ 274.870498][ T53] Bluetooth: hci14: command tx timeout [ 276.790422][ T53] Bluetooth: hci15: command tx timeout [ 278.870529][ T53] Bluetooth: hci15: command tx timeout [ 299.263949][ T5093] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 299.277219][ T5093] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 299.285992][ T5093] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 299.295009][ T5093] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 299.303644][ T5093] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 299.311481][ T5093] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 299.715503][ T5093] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 299.731037][ T5093] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 299.739027][ T5093] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 299.758164][ T5093] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 299.767919][ T5093] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 299.775928][ T5093] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 300.636399][ T5093] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 300.658578][ T5093] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 300.669175][ T5093] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 300.685781][ T5093] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 300.694347][ T5093] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 300.702982][ T5093] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 301.358282][ T53] Bluetooth: hci16: command tx timeout [ 301.830598][ T6507] Bluetooth: hci17: command tx timeout [ 302.796064][ T6507] Bluetooth: hci18: command tx timeout [ 303.458487][ T6507] Bluetooth: hci16: command tx timeout [ 303.464209][ T5099] Bluetooth: hci0: command 0x0406 tx timeout [ 303.470866][ T6507] Bluetooth: hci3: command 0x0406 tx timeout [ 303.476891][ T6507] Bluetooth: hci7: command 0x0406 tx timeout [ 303.910464][ T6508] Bluetooth: hci17: command tx timeout [ 304.870586][ T5103] Bluetooth: hci18: command tx timeout [ 305.510545][ T5093] Bluetooth: hci16: command tx timeout [ 305.992768][ T5093] Bluetooth: hci17: command tx timeout [ 306.956478][ T5093] Bluetooth: hci18: command tx timeout [ 307.590404][ T5093] Bluetooth: hci16: command tx timeout [ 308.070441][ T5093] Bluetooth: hci17: command tx timeout [ 309.030494][ T5093] Bluetooth: hci18: command tx timeout [ 316.876637][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.888707][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.586263][ T5103] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 326.595716][ T5103] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 326.610762][ T5103] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 326.619802][ T5103] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 326.638314][ T5103] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 326.652244][ T5103] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 326.691161][ T5103] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 326.720346][ T5103] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 326.728213][ T5103] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 326.737903][ T5103] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 326.746103][ T5103] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 326.753881][ T5103] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 328.711542][ T5093] Bluetooth: hci19: command tx timeout [ 328.790510][ T5093] Bluetooth: hci20: command tx timeout [ 329.049023][ T6508] Bluetooth: hci8: command 0x0406 tx timeout [ 329.055288][ T5093] Bluetooth: hci4: command 0x0406 tx timeout [ 330.790710][ T5103] Bluetooth: hci19: command tx timeout [ 330.870695][ T5103] Bluetooth: hci20: command tx timeout [ 331.205228][ T4487] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 331.214822][ T4487] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 331.224000][ T4487] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 331.232872][ T4487] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 331.247673][ T4487] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 331.255281][ T4487] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 332.870712][ T4487] Bluetooth: hci19: command tx timeout [ 332.950610][ T4487] Bluetooth: hci20: command tx timeout [ 333.350718][ T4487] Bluetooth: hci21: command tx timeout [ 334.169949][ T4487] Bluetooth: hci9: command 0x0406 tx timeout [ 334.951748][ T5103] Bluetooth: hci19: command tx timeout [ 335.030661][ T5103] Bluetooth: hci20: command tx timeout [ 335.430555][ T5103] Bluetooth: hci21: command tx timeout [ 337.510456][ T5103] Bluetooth: hci21: command tx timeout [ 338.470904][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 338.478600][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 338.501697][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 338.526540][ T30] task:kworker/u8:2 state:D stack:20504 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 338.560273][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 338.568208][ T30] Call Trace: [ 338.582011][ T30] [ 338.584987][ T30] __schedule+0x17e8/0x4a20 [ 338.589540][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.676850][ T30] ? __pfx___schedule+0x10/0x10 [ 338.696294][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.721595][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.727104][ T30] ? kthread_data+0x52/0xd0 [ 338.747424][ T30] ? schedule+0x90/0x320 [ 338.792380][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.798048][ T30] ? wq_worker_sleeping+0x66/0x240 [ 338.810257][ T30] ? schedule+0x90/0x320 [ 338.814894][ T30] schedule+0x14b/0x320 [ 338.819112][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.832436][ T30] __mutex_lock+0x6a4/0xd70 [ 338.836973][ T30] ? mark_lock+0x9a/0x350 [ 338.841955][ T30] ? __mutex_lock+0x527/0xd70 [ 338.846673][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 338.892052][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.897151][ T30] addrconf_dad_work+0xd0/0x16f0 [ 338.918049][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.929866][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 338.936934][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.943587][ T30] ? process_scheduled_works+0x945/0x1830 [ 338.949333][ T30] process_scheduled_works+0xa2e/0x1830 [ 338.955685][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.967859][ T30] ? assign_work+0x364/0x3d0 [ 338.975106][ T30] worker_thread+0x86d/0xd50 [ 338.979738][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 338.989490][ T30] ? __kthread_parkme+0x169/0x1d0 [ 338.997151][ T30] ? __pfx_worker_thread+0x10/0x10 [ 339.002576][ T30] kthread+0x2f2/0x390 [ 339.006680][ T30] ? __pfx_worker_thread+0x10/0x10 [ 339.015724][ T30] ? __pfx_kthread+0x10/0x10 [ 339.033057][ T30] ret_from_fork+0x4d/0x80 [ 339.037861][ T30] ? __pfx_kthread+0x10/0x10 [ 339.049624][ T30] ret_from_fork_asm+0x1a/0x30 [ 339.069256][ T30] [ 339.072944][ T30] INFO: task jbd2/sda1-8:4506 blocked for more than 143 seconds. [ 339.086455][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 339.098922][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.109219][ T30] task:jbd2/sda1-8 state:D stack:24208 pid:4506 tgid:4506 ppid:2 flags:0x00004000 [ 339.125965][ T30] Call Trace: [ 339.129511][ T30] [ 339.132947][ T30] __schedule+0x17e8/0x4a20 [ 339.137504][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.149460][ T30] ? __pfx___schedule+0x10/0x10 [ 339.154839][ T30] ? __pfx_lock_release+0x10/0x10 [ 339.159892][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.173582][ T30] ? schedule+0x90/0x320 [ 339.177853][ T30] schedule+0x14b/0x320 [ 339.200274][ T30] io_schedule+0x8d/0x110 [ 339.204643][ T30] bit_wait_io+0x12/0xd0 [ 339.208910][ T30] __wait_on_bit+0xb2/0x2f0 [ 339.228529][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 339.235194][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 339.243319][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 339.248302][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 339.257096][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 339.267275][ T30] jbd2_journal_commit_transaction+0x3d7f/0x6760 [ 339.273986][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 339.284497][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 339.289734][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.299319][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 339.307857][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.313937][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 339.319615][ T30] ? __timer_delete_sync+0x15c/0x310 [ 339.349058][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.363683][ T30] ? __timer_delete_sync+0x25d/0x310 [ 339.369003][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 339.381062][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 339.386567][ T30] ? prepare_to_wait+0x184/0x210 [ 339.393565][ T30] ? schedule+0x90/0x320 [ 339.397849][ T30] kjournald2+0x463/0x850 [ 339.408402][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.415099][ T30] ? __pfx_kjournald2+0x10/0x10 [ 339.419990][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 339.426876][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.440469][ T30] ? __kthread_parkme+0x169/0x1d0 [ 339.445535][ T30] ? __pfx_kjournald2+0x10/0x10 [ 339.451085][ T30] kthread+0x2f2/0x390 [ 339.455188][ T30] ? __pfx_kjournald2+0x10/0x10 [ 339.460070][ T30] ? __pfx_kthread+0x10/0x10 [ 339.477016][ T30] ret_from_fork+0x4d/0x80 [ 339.481969][ T30] ? __pfx_kthread+0x10/0x10 [ 339.486595][ T30] ret_from_fork_asm+0x1a/0x30 [ 339.511628][ T30] [ 339.514702][ T30] INFO: task dhcpcd:4757 blocked for more than 144 seconds. [ 339.524283][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 339.538773][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.547814][ T30] task:dhcpcd state:D stack:20384 pid:4757 tgid:4757 ppid:4756 flags:0x00000002 [ 339.564345][ T30] Call Trace: [ 339.567651][ T30] [ 339.571102][ T30] __schedule+0x17e8/0x4a20 [ 339.575921][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.587946][ T30] ? __pfx___schedule+0x10/0x10 [ 339.593261][ T5103] Bluetooth: hci21: command tx timeout [ 339.601533][ T30] ? __pfx_lock_release+0x10/0x10 [ 339.606596][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 339.614843][ T30] ? schedule+0x90/0x320 [ 339.619118][ T30] schedule+0x14b/0x320 [ 339.629407][ T30] schedule_preempt_disabled+0x13/0x30 [ 339.644139][ T30] __mutex_lock+0x6a4/0xd70 [ 339.648692][ T30] ? __mutex_lock+0x527/0xd70 [ 339.664488][ T30] ? netlink_dump+0x5d3/0xe50 [ 339.669206][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 339.683961][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 339.688937][ T30] ? __entry_text_end+0x1020c5/0x1020c9 [ 339.700244][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 339.705838][ T30] netlink_dump+0x5d3/0xe50 [ 339.712833][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 339.717918][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 339.733123][ T30] __netlink_dump_start+0x59d/0x780 [ 339.738747][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 339.750600][ T30] rtnetlink_rcv_msg+0xda2/0x1180 [ 339.755678][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 339.767301][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 339.772836][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.778545][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 339.790965][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.796636][ T30] ? mark_lock+0x9a/0x350 [ 339.810614][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.819344][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 339.824931][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 339.829910][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 339.850305][ T30] netlink_rcv_skb+0x1e5/0x430 [ 339.855114][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.864499][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.869855][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.877848][ T30] netlink_unicast+0x7ec/0x980 [ 339.882933][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 339.888249][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.900117][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.906351][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.913480][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.919139][ T30] ? __check_object_size+0x49c/0x900 [ 339.944572][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.953759][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.959423][ T30] netlink_sendmsg+0x8db/0xcb0 [ 339.969424][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.977480][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.986748][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 339.996053][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.004335][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.010483][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 340.015980][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.027783][ T30] __sock_sendmsg+0x223/0x270 [ 340.034333][ T30] __sys_sendto+0x3a4/0x4f0 [ 340.038878][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 340.045027][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.056652][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.064203][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.089563][ T30] __x64_sys_sendto+0xde/0x100 [ 340.094894][ T30] do_syscall_64+0xf3/0x230 [ 340.099444][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.117051][ T30] RIP: 0033:0x7fc46a6c4ad7 [ 340.121875][ T30] RSP: 002b:00007ffca83912e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 340.130625][ T30] RAX: ffffffffffffffda RBX: 00007ffca8392410 RCX: 00007fc46a6c4ad7 [ 340.138626][ T30] RDX: 0000000000000014 RSI: 00007ffca8392330 RDI: 0000000000000011 [ 340.160299][ T30] RBP: 00007ffca83923a0 R08: 00007ffca8392314 R09: 000000000000000c [ 340.168302][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 340.185113][ T30] R13: 00007ffca8392314 R14: 00007ffca8392330 R15: 0000000000000105 [ 340.193731][ T30] [ 340.196839][ T30] INFO: task syz-executor:5090 blocked for more than 145 seconds. [ 340.212446][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 340.220090][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.256442][ T30] task:syz-executor state:D stack:20288 pid:5090 tgid:5090 ppid:1 flags:0x00004006 [ 340.269243][ T30] Call Trace: [ 340.272813][ T30] [ 340.275767][ T30] __schedule+0x17e8/0x4a20 [ 340.284142][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.289810][ T30] ? __pfx___schedule+0x10/0x10 [ 340.298785][ T30] ? __pfx_lock_release+0x10/0x10 [ 340.304237][ T30] ? schedule+0x90/0x320 [ 340.308506][ T30] schedule+0x14b/0x320 [ 340.319708][ T30] schedule_timeout+0xb0/0x310 [ 340.324830][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 340.330536][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.336561][ T30] ? wait_for_completion+0x2fe/0x620 [ 340.342676][ T30] ? wait_for_completion+0x2fe/0x620 [ 340.347989][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.359901][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374256][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 340.379495][ T30] ? wait_for_completion+0x2fe/0x620 [ 340.391912][ T30] wait_for_completion+0x355/0x620 [ 340.397265][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.403828][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 340.409513][ T30] ? __flush_work+0xe6/0xd00 [ 340.420743][ T30] __flush_work+0xaa9/0xd00 [ 340.426652][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.432781][ T30] ? __flush_work+0xe6/0xd00 [ 340.437418][ T30] ? __pfx___flush_work+0x10/0x10 [ 340.448590][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 340.454740][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.461771][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 340.466936][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.485750][ T30] unregister_netdevice_many_notify+0x8a0/0x16b0 [ 340.492454][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.498119][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 340.519577][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.539175][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.552182][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 340.557785][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.570035][ T30] unregister_netdevice_queue+0x303/0x370 [ 340.576300][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 340.582862][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.588756][ T30] __tun_detach+0x6b6/0x1600 [ 340.599681][ T30] tun_chr_close+0x108/0x1b0 [ 340.606890][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 340.612529][ T30] __fput+0x24c/0x8a0 [ 340.616561][ T30] task_work_run+0x251/0x310 [ 340.625241][ T30] ? __pfx_task_work_run+0x10/0x10 [ 340.634395][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.641851][ T30] ? kmem_cache_free+0x145/0x350 [ 340.646842][ T30] do_exit+0xa27/0x27e0 [ 340.668865][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.674876][ T30] ? __pfx_do_exit+0x10/0x10 [ 340.679504][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 340.690253][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.695916][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.703469][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.709826][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 340.721069][ T30] do_group_exit+0x207/0x2c0 [ 340.725696][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.731384][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.737043][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 340.748365][ T30] get_signal+0x16a1/0x1740 [ 340.754550][ T30] ? __pfx_vfs_read+0x10/0x10 [ 340.759260][ T30] ? __pfx_get_signal+0x10/0x10 [ 340.770795][ T30] arch_do_signal_or_restart+0x96/0x860 [ 340.776383][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 340.803433][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.809469][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 340.836307][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 340.842182][ T30] do_syscall_64+0x100/0x230 [ 340.847032][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.853428][ T30] RIP: 0033:0x7f3e7a9746bc [ 340.857867][ T30] RSP: 002b:00007ffee0e05880 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.874500][ T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f3e7a9746bc [ 340.882801][ T30] RDX: 0000000000000028 RSI: 00007ffee0e05980 RDI: 00000000000000f9 [ 340.896805][ T30] RBP: 00007ffee0e0590c R08: 0000000000000000 R09: 0079746972756365 [ 340.905105][ T30] R10: 00007ffee0e05240 R11: 0000000000000246 R12: 0000555567f6b5eb [ 340.913389][ T30] R13: 0000555567f6b590 R14: 00007f3e7a9d5328 R15: 0000000000000018 [ 340.921860][ T30] [ 340.924918][ T30] INFO: task kworker/0:8:5153 blocked for more than 145 seconds. [ 340.938635][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 340.964539][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.983869][ T30] task:kworker/0:8 state:D stack:19416 pid:5153 tgid:5153 ppid:2 flags:0x00004000 [ 340.994569][ T30] Workqueue: events linkwatch_event [ 340.999813][ T30] Call Trace: [ 341.008995][ T30] [ 341.012700][ T30] __schedule+0x17e8/0x4a20 [ 341.017237][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.023596][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.029271][ T30] ? __pfx___schedule+0x10/0x10 [ 341.040903][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 341.047120][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.052688][ T30] ? kick_pool+0x45c/0x620 [ 341.057142][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.074995][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.081132][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 341.086384][ T30] ? schedule+0x90/0x320 [ 341.102675][ T30] schedule+0x14b/0x320 [ 341.106865][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.127514][ T30] __mutex_lock+0x6a4/0xd70 [ 341.134592][ T30] ? __mutex_lock+0x527/0xd70 [ 341.139306][ T30] ? linkwatch_event+0xe/0x60 [ 341.153516][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.158596][ T30] ? process_scheduled_works+0x945/0x1830 [ 341.167206][ T30] linkwatch_event+0xe/0x60 [ 341.172559][ T30] process_scheduled_works+0xa2e/0x1830 [ 341.178173][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.190675][ T30] ? assign_work+0x364/0x3d0 [ 341.195303][ T30] worker_thread+0x86d/0xd50 [ 341.199926][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 341.213206][ T30] ? __kthread_parkme+0x169/0x1d0 [ 341.218481][ T30] ? __pfx_worker_thread+0x10/0x10 [ 341.227785][ T30] kthread+0x2f2/0x390 [ 341.232166][ T30] ? __pfx_worker_thread+0x10/0x10 [ 341.237306][ T30] ? __pfx_kthread+0x10/0x10 [ 341.256798][ T30] ret_from_fork+0x4d/0x80 [ 341.264695][ T30] ? __pfx_kthread+0x10/0x10 [ 341.269322][ T30] ret_from_fork_asm+0x1a/0x30 [ 341.278523][ T30] [ 341.286415][ T30] INFO: task syz-executor:5585 blocked for more than 146 seconds. [ 341.295876][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 341.308336][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.318637][ T30] task:syz-executor state:D stack:19952 pid:5585 tgid:5585 ppid:1 flags:0x00004006 [ 341.336143][ T30] Call Trace: [ 341.339444][ T30] [ 341.342855][ T30] __schedule+0x17e8/0x4a20 [ 341.347413][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.353537][ T30] ? __pfx___schedule+0x10/0x10 [ 341.358423][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.370459][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 341.376349][ T30] ? schedule+0x90/0x320 [ 341.392168][ T30] schedule+0x14b/0x320 [ 341.396364][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.412781][ T30] __mutex_lock+0x6a4/0xd70 [ 341.417323][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.423922][ T30] ? __mutex_lock+0x527/0xd70 [ 341.428641][ T30] ? tun_chr_close+0x3e/0x1b0 [ 341.440047][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.447216][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.459686][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.465673][ T30] tun_chr_close+0x3e/0x1b0 [ 341.470701][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 341.475846][ T30] __fput+0x24c/0x8a0 [ 341.487024][ T30] task_work_run+0x251/0x310 [ 341.491989][ T30] ? __pfx_task_work_run+0x10/0x10 [ 341.497143][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.510245][ T30] ? kmem_cache_free+0x145/0x350 [ 341.515234][ T30] do_exit+0xa27/0x27e0 [ 341.519427][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.530323][ T30] ? __pfx_do_exit+0x10/0x10 [ 341.534950][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.554524][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.560187][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 341.584348][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.591037][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 341.596200][ T30] do_group_exit+0x207/0x2c0 [ 341.604864][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.612903][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.618563][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 341.625603][ T30] get_signal+0x16a1/0x1740 [ 341.630173][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 341.640531][ T30] ? __pfx_get_signal+0x10/0x10 [ 341.645437][ T30] arch_do_signal_or_restart+0x96/0x860 [ 341.652935][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 341.659332][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 341.673471][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 341.679238][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 341.686949][ T30] do_syscall_64+0x100/0x230 [ 341.708129][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.716350][ T30] RIP: 0033:0x7ff454f7796c [ 341.721067][ T30] RSP: 002b:00007ffd4f754c40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 341.729515][ T30] RAX: 0000000000000028 RBX: 00007ff455c34620 RCX: 00007ff454f7796c [ 341.743792][ T30] RDX: 0000000000000028 RSI: 00007ff455c34670 RDI: 0000000000000003 [ 341.752080][ T30] RBP: 0000000000000000 R08: 00007ffd4f754c94 R09: 000000000000000c [ 341.760073][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 341.770273][ T30] R13: 0000000000000000 R14: 00007ff455c34670 R15: 0000000000000000 [ 341.778286][ T30] [ 341.792595][ T30] INFO: task syz-executor:5916 blocked for more than 146 seconds. [ 341.801785][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 341.809431][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.824597][ T30] task:syz-executor state:D stack:21024 pid:5916 tgid:5916 ppid:1 flags:0x00004006 [ 341.850288][ T30] Call Trace: [ 341.853589][ T30] [ 341.856537][ T30] __schedule+0x17e8/0x4a20 [ 341.869463][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.879246][ T30] ? __pfx___schedule+0x10/0x10 [ 341.887382][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.892927][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 341.898438][ T30] ? schedule+0x90/0x320 [ 341.910063][ T30] schedule+0x14b/0x320 [ 341.914561][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.920050][ T30] __mutex_lock+0x6a4/0xd70 [ 341.925017][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.931160][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 341.936405][ T30] ? __mutex_lock+0x527/0xd70 [ 341.947052][ T30] ? nsim_destroy+0x71/0x5c0 [ 341.955405][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.960746][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 341.966150][ T30] ? _raw_spin_unlock+0x28/0x50 [ 341.987141][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.000602][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.006276][ T30] nsim_destroy+0x71/0x5c0 [ 342.017614][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.029224][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 342.040477][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 342.046406][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 342.056926][ T30] nsim_drv_remove+0x58/0x160 [ 342.061946][ T30] device_release_driver_internal+0x4ab/0x7c0 [ 342.068071][ T30] bus_remove_device+0x34f/0x420 [ 342.074926][ T30] device_del+0x57a/0x9b0 [ 342.079309][ T30] ? __pfx_device_del+0x10/0x10 [ 342.092737][ T30] device_unregister+0x20/0xc0 [ 342.097550][ T30] del_device_store+0x363/0x480 [ 342.128033][ T30] ? __pfx_del_device_store+0x10/0x10 [ 342.138158][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.148653][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 342.153853][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.159517][ T30] ? bus_attr_store+0x4f/0xa0 [ 342.170378][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 342.175624][ T30] kernfs_fop_write_iter+0x3a3/0x500 [ 342.181276][ T30] vfs_write+0xa74/0xc90 [ 342.185561][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 342.198120][ T30] ? __pfx_vfs_write+0x10/0x10 [ 342.203255][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.209131][ T30] ksys_write+0x1a0/0x2c0 [ 342.219805][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.226655][ T30] ? __pfx_ksys_write+0x10/0x10 [ 342.237577][ T30] ? do_syscall_64+0x100/0x230 [ 342.242860][ T30] ? do_syscall_64+0xb6/0x230 [ 342.247615][ T30] do_syscall_64+0xf3/0x230 [ 342.262094][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.267762][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.290024][ T30] RIP: 0033:0x7f43c577475f [ 342.295018][ T30] RSP: 002b:00007ffdf2fbb080 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 342.316303][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f43c577475f [ 342.324612][ T30] RDX: 0000000000000001 RSI: 00007ffdf2fbb0d0 RDI: 0000000000000005 [ 342.333133][ T30] RBP: 00007f43c57e45a0 R08: 0000000000000000 R09: 00007ffdf2fbaed7 [ 342.346951][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 342.355372][ T30] R13: 00007ffdf2fbb0d0 R14: 00007f43c6434620 R15: 0000000000000003 [ 342.370567][ T30] [ 342.373616][ T30] INFO: task syz-executor:6339 blocked for more than 147 seconds. [ 342.388830][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 342.402750][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.433230][ T30] task:syz-executor state:D stack:24608 pid:6339 tgid:6339 ppid:1 flags:0x00004006 [ 342.449508][ T30] Call Trace: [ 342.453126][ T30] [ 342.456082][ T30] __schedule+0x17e8/0x4a20 [ 342.461073][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.466739][ T30] ? __pfx___schedule+0x10/0x10 [ 342.477846][ T30] ? __pfx_lock_release+0x10/0x10 [ 342.486852][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 342.492651][ T30] ? schedule+0x90/0x320 [ 342.496921][ T30] schedule+0x14b/0x320 [ 342.505526][ T30] schedule_preempt_disabled+0x13/0x30 [ 342.511447][ T30] __mutex_lock+0x6a4/0xd70 [ 342.515988][ T30] ? __mutex_lock+0x527/0xd70 [ 342.524443][ T30] ? register_nexthop_notifier+0x84/0x290 [ 342.533185][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 342.538357][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.557085][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.563535][ T30] ? __asan_memset+0x23/0x50 [ 342.568162][ T30] register_nexthop_notifier+0x84/0x290 [ 342.575408][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 342.586113][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 342.594639][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.602011][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.608254][ T30] ? __asan_memset+0x23/0x50 [ 342.617904][ T30] ops_init+0x35b/0x610 [ 342.623572][ T30] setup_net+0x515/0xca0 [ 342.627844][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 342.639799][ T30] ? __pfx_setup_net+0x10/0x10 [ 342.644907][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.650876][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.656551][ T30] copy_net_ns+0x4e2/0x7b0 [ 342.661711][ T30] create_new_namespaces+0x425/0x7b0 [ 342.667044][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.678716][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 342.690992][ T30] ksys_unshare+0x619/0xc10 [ 342.695552][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 342.708724][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.723085][ T30] ? do_syscall_64+0x100/0x230 [ 342.727902][ T30] __x64_sys_unshare+0x38/0x40 [ 342.738910][ T30] do_syscall_64+0xf3/0x230 [ 342.751584][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.757524][ T30] RIP: 0033:0x7fba47377337 [ 342.768443][ T30] RSP: 002b:00007ffff3976508 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 342.777300][ T30] RAX: ffffffffffffffda RBX: 00007fba47503f20 RCX: 00007fba47377337 [ 342.791448][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 342.799656][ T30] RBP: 00007fba47504a18 R08: 0000000000000000 R09: 0000000000000000 [ 342.813535][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 342.832721][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 342.858810][ T30] [ 342.863354][ T30] INFO: task syz-executor:6356 blocked for more than 147 seconds. [ 342.878897][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 342.886839][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.896034][ T30] task:syz-executor state:D stack:24992 pid:6356 tgid:6356 ppid:1 flags:0x00000004 [ 342.912711][ T30] Call Trace: [ 342.916009][ T30] [ 342.918961][ T30] __schedule+0x17e8/0x4a20 [ 342.924174][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.929874][ T30] ? __pfx___schedule+0x10/0x10 [ 342.939690][ T30] ? __pfx_lock_release+0x10/0x10 [ 342.950753][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 342.956267][ T30] ? schedule+0x90/0x320 [ 342.965527][ T30] schedule+0x14b/0x320 [ 342.969716][ T30] schedule_preempt_disabled+0x13/0x30 [ 342.975745][ T30] __mutex_lock+0x6a4/0xd70 [ 342.999027][ T30] ? __mutex_lock+0x527/0xd70 [ 343.005226][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 343.013045][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 343.018125][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 343.028200][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 343.034164][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.039662][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 343.052389][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.058108][ T30] ? __pfx_validate_chain+0x10/0x10 [ 343.076406][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.086906][ T30] ? __pfx_validate_chain+0x10/0x10 [ 343.092682][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.098342][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 343.105101][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.116573][ T30] ? mark_lock+0x9a/0x350 [ 343.122560][ T30] ? __pfx_validate_chain+0x10/0x10 [ 343.127797][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.147799][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 343.159648][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.165591][ T30] ? mark_lock+0x9a/0x350 [ 343.169956][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.178369][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 343.189472][ T30] netlink_rcv_skb+0x1e5/0x430 [ 343.195854][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.201745][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.207097][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.217696][ T30] netlink_unicast+0x7ec/0x980 [ 343.226465][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 343.232056][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.237719][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.249498][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.255505][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.261438][ T30] ? __check_object_size+0x49c/0x900 [ 343.266762][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.273376][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.279042][ T30] netlink_sendmsg+0x8db/0xcb0 [ 343.300327][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.305666][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.313545][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 343.318531][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.331033][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.336911][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 343.342884][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.348414][ T30] __sock_sendmsg+0x223/0x270 [ 343.354098][ T30] __sys_sendto+0x3a4/0x4f0 [ 343.358643][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 343.371824][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.377488][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 343.390258][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.396619][ T30] ? exc_page_fault+0x590/0x8c0 [ 343.429410][ T30] __x64_sys_sendto+0xde/0x100 [ 343.434773][ T30] do_syscall_64+0xf3/0x230 [ 343.439325][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.452285][ T30] RIP: 0033:0x7f87e257796c [ 343.456726][ T30] RSP: 002b:00007fffca1b8f80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 343.465650][ T30] RAX: ffffffffffffffda RBX: 00007f87e3234620 RCX: 00007f87e257796c [ 343.479559][ T30] RDX: 0000000000000028 RSI: 00007f87e3234670 RDI: 0000000000000003 [ 343.487857][ T30] RBP: 0000000000000000 R08: 00007fffca1b8fd4 R09: 000000000000000c [ 343.496358][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 343.510086][ T30] R13: 0000000000000000 R14: 00007f87e3234670 R15: 0000000000000000 [ 343.518525][ T30] [ 343.521840][ T30] INFO: task syz-executor:6360 blocked for more than 148 seconds. [ 343.530009][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 343.555387][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.572055][ T30] task:syz-executor state:D stack:24992 pid:6360 tgid:6360 ppid:1 flags:0x00000004 [ 343.587341][ T30] Call Trace: [ 343.593988][ T30] [ 343.596944][ T30] __schedule+0x17e8/0x4a20 [ 343.602074][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.607747][ T30] ? __pfx___schedule+0x10/0x10 [ 343.618868][ T30] ? __pfx_lock_release+0x10/0x10 [ 343.624617][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 343.634026][ T30] ? schedule+0x90/0x320 [ 343.638296][ T30] schedule+0x14b/0x320 [ 343.648657][ T30] schedule_preempt_disabled+0x13/0x30 [ 343.658203][ T30] __mutex_lock+0x6a4/0xd70 [ 343.666415][ T30] ? __mutex_lock+0x527/0xd70 [ 343.671414][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 343.676656][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 343.684462][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 343.689538][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 343.706329][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.728929][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 343.739355][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.750259][ T30] ? __pfx_validate_chain+0x10/0x10 [ 343.756311][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.767193][ T30] ? __pfx_validate_chain+0x10/0x10 [ 343.773935][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.779814][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 343.785275][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.797095][ T30] ? mark_lock+0x9a/0x350 [ 343.801931][ T30] ? __pfx_validate_chain+0x10/0x10 [ 343.807174][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.813401][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 343.818475][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.830239][ T30] ? mark_lock+0x9a/0x350 [ 343.835157][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.852789][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 343.857870][ T30] netlink_rcv_skb+0x1e5/0x430 [ 343.872983][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.878490][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.891154][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.896401][ T30] netlink_unicast+0x7ec/0x980 [ 343.901719][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 343.907036][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.920684][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.926347][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.935451][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.943687][ T30] ? __check_object_size+0x49c/0x900 [ 343.949013][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.960651][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.966315][ T30] netlink_sendmsg+0x8db/0xcb0 [ 343.976213][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.981821][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.987479][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 343.992892][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.998555][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.019805][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 344.034644][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.048331][ T30] __sock_sendmsg+0x223/0x270 [ 344.058153][ T30] __sys_sendto+0x3a4/0x4f0 [ 344.062986][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 344.068274][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.080254][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.088304][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.095125][ T30] ? exc_page_fault+0x590/0x8c0 [ 344.100425][ T30] __x64_sys_sendto+0xde/0x100 [ 344.105223][ T30] do_syscall_64+0xf3/0x230 [ 344.109765][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.123065][ T30] RIP: 0033:0x7fed9d57796c [ 344.127506][ T30] RSP: 002b:00007ffcd65c65f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 344.140776][ T30] RAX: ffffffffffffffda RBX: 00007fed9e234620 RCX: 00007fed9d57796c [ 344.148777][ T30] RDX: 0000000000000028 RSI: 00007fed9e234670 RDI: 0000000000000003 [ 344.167550][ T30] RBP: 0000000000000000 R08: 00007ffcd65c6644 R09: 000000000000000c [ 344.186008][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 344.200022][ T30] R13: 0000000000000000 R14: 00007fed9e234670 R15: 0000000000000000 [ 344.208547][ T30] [ 344.217712][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 344.237210][ T30] [ 344.237210][ T30] Showing all locks held in the system: [ 344.252012][ T30] 1 lock held by khungtaskd/30: [ 344.256880][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 344.273339][ T30] 3 locks held by kworker/u8:2/35: [ 344.278487][ T30] #0: ffff88802a42b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 344.295306][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 344.322054][ T30] #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 344.339011][ T30] 2 locks held by kworker/1:1/45: [ 344.351898][ T30] 5 locks held by kworker/u8:10/2799: [ 344.357293][ T30] 2 locks held by dhcpcd/4757: [ 344.367059][ T30] #0: ffff8880786b5678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 344.379178][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x5d3/0xe50 [ 344.394707][ T30] 2 locks held by getty/4846: [ 344.399413][ T30] #0: ffff88802aa960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 344.412425][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 344.428884][ T30] 2 locks held by syz-executor/5090: [ 344.434697][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 344.444049][ T30] #1: ffffffff8e1ce5b0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x607/0x16b0 [ 344.463690][ T30] 3 locks held by kworker/0:8/5153: [ 344.468905][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 344.502421][ T30] #1: ffffc90002f4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 344.518593][ T30] #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 344.530340][ T30] 1 lock held by syz-executor/5585: [ 344.535568][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 344.548761][ T30] 7 locks held by syz-executor/5916: [ 344.556906][ T30] #0: ffff88807de9e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 344.571040][ T30] #1: ffff88807dfc9488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 344.583694][ T30] #2: ffff88802202d698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 344.597829][ T30] #3: ffffffff8eef44e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 344.611463][ T30] #4: ffff88801ff0a0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 344.649229][ T30] #5: ffff88801ff0b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 344.673630][ T30] #6: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 344.684172][ T30] 3 locks held by syz.4.249/6241: [ 344.689221][ T30] 2 locks held by syz-executor/6339: [ 344.700243][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 344.709738][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 344.725541][ T30] 1 lock held by syz-executor/6356: [ 344.731041][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.742093][ T30] 1 lock held by syz-executor/6360: [ 344.747308][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.763810][ T30] 1 lock held by syz.5.303/6449: [ 344.768764][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 344.788000][ T30] 1 lock held by syz.2.298/6454: [ 344.810356][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: raw_setsockopt+0xe6d/0x1a80 [ 344.819668][ T30] 1 lock held by syz.2.298/6455: [ 344.834794][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: raw_bind+0x99/0x770 [ 344.846147][ T30] 1 lock held by syz-executor/6458: [ 344.851642][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.872053][ T30] 1 lock held by syz-executor/6462: [ 344.877269][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.891951][ T30] 1 lock held by syz-executor/6465: [ 344.897166][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.914357][ T30] 1 lock held by syz-executor/6470: [ 344.919576][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.929723][ T30] 1 lock held by syz-executor/6477: [ 344.947497][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.962169][ T30] 1 lock held by syz-executor/6478: [ 344.967389][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 344.983348][ T30] 1 lock held by syz-executor/6483: [ 344.988569][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.003500][ T30] 1 lock held by syz-executor/6484: [ 345.008716][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.023609][ T30] 1 lock held by syz-executor/6491: [ 345.029027][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.044873][ T30] 1 lock held by syz-executor/6496: [ 345.050088][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.060126][ T30] 1 lock held by syz-executor/6501: [ 345.090106][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.102862][ T30] 1 lock held by syz-executor/6505: [ 345.108077][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.125505][ T30] 1 lock held by syz-executor/6512: [ 345.132245][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.142296][ T30] 1 lock held by syz-executor/6513: [ 345.147511][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.163873][ T30] 1 lock held by syz-executor/6520: [ 345.169089][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 345.184182][ T30] [ 345.186523][ T30] ============================================= [ 345.186523][ T30] [ 345.201608][ T30] NMI backtrace for cpu 0 [ 345.205949][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 345.215939][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 345.226000][ T30] Call Trace: [ 345.229288][ T30] [ 345.232227][ T30] dump_stack_lvl+0x241/0x360 [ 345.236941][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.242174][ T30] ? __pfx__printk+0x10/0x10 [ 345.246788][ T30] ? vprintk_emit+0x631/0x770 [ 345.251491][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 345.256552][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 345.261515][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 345.266989][ T30] ? _printk+0xd5/0x120 [ 345.271170][ T30] ? __pfx__printk+0x10/0x10 [ 345.275784][ T30] ? __wake_up_klogd+0xcc/0x110 [ 345.280664][ T30] ? __pfx__printk+0x10/0x10 [ 345.285279][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.290928][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 345.295986][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 345.301990][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 345.307995][ T30] watchdog+0xfde/0x1020 [ 345.312259][ T30] ? watchdog+0x1ea/0x1020 [ 345.316705][ T30] ? __pfx_watchdog+0x10/0x10 [ 345.321406][ T30] kthread+0x2f2/0x390 [ 345.325500][ T30] ? __pfx_watchdog+0x10/0x10 [ 345.330195][ T30] ? __pfx_kthread+0x10/0x10 [ 345.334811][ T30] ret_from_fork+0x4d/0x80 [ 345.339253][ T30] ? __pfx_kthread+0x10/0x10 [ 345.343865][ T30] ret_from_fork_asm+0x1a/0x30 [ 345.348679][ T30] [ 345.352621][ T30] Sending NMI from CPU 0 to CPUs 1: [ 345.357842][ C1] NMI backtrace for cpu 1 [ 345.357855][ C1] CPU: 1 PID: 6241 Comm: syz.4.249 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 345.357879][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 345.357892][ C1] RIP: 0010:arch_stack_walk+0x128/0x1b0 [ 345.357935][ C1] Code: e8 cd b0 09 00 8b 9d 70 ff ff ff 31 ff 89 de e8 fe bc 5e 00 85 db 74 4b 4c 8d bd 70 ff ff ff 4c 89 ff e8 2b 7f 09 00 48 89 c3 <31> ff 48 89 c6 e8 7e bd 5e 00 48 85 db 74 31 4c 89 f7 48 89 de 4d [ 345.357953][ C1] RSP: 0018:ffffc90000a178a0 EFLAGS: 00000046 [ 345.357973][ C1] RAX: ffffffff8b85d2c6 RBX: ffffffff8b85d2c6 RCX: ffff88807c153c00 [ 345.357991][ C1] RDX: 0000000080010303 RSI: 0000000000000001 RDI: 0000000000000000 [ 345.358006][ C1] RBP: ffffc90000a17930 R08: ffffffff8140ee98 R09: ffffffff8141095f [ 345.358024][ C1] R10: 0000000000000003 R11: ffff88807c153c00 R12: ffff88807c153c00 [ 345.358040][ C1] R13: ffffffff8181dd90 R14: ffffc90000a17980 R15: ffffc90000a178a0 [ 345.358061][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 345.358081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.358097][ C1] CR2: 000000110c3f3be5 CR3: 000000000e132000 CR4: 0000000000350ef0 [ 345.358115][ C1] Call Trace: [ 345.358123][ C1] [ 345.358131][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 345.358158][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 345.358187][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 345.358212][ C1] ? nmi_handle+0x2a/0x5a0 [ 345.358261][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 345.358290][ C1] ? nmi_handle+0x151/0x5a0 [ 345.358327][ C1] ? nmi_handle+0x2a/0x5a0 [ 345.358366][ C1] ? arch_stack_walk+0x128/0x1b0 [ 345.358404][ C1] ? default_do_nmi+0x63/0x160 [ 345.358431][ C1] ? exc_nmi+0x123/0x1f0 [ 345.358456][ C1] ? end_repeat_nmi+0xf/0x53 [ 345.358494][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.358535][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 345.358568][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 345.358602][ C1] ? unwind_get_return_address+0x68/0xc0 [ 345.358639][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 345.358673][ C1] ? arch_stack_walk+0x128/0x1b0 [ 345.358712][ C1] ? arch_stack_walk+0x128/0x1b0 [ 345.358752][ C1] ? arch_stack_walk+0x128/0x1b0 [ 345.358791][ C1] [ 345.358798][ C1] [ 345.358811][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 345.358847][ C1] stack_trace_save+0x118/0x1d0 [ 345.358888][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 345.358932][ C1] ? debug_check_no_obj_freed+0x561/0x580 [ 345.358969][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 345.359005][ C1] ? __pfx_lock_release+0x10/0x10 [ 345.359032][ C1] kasan_save_track+0x3f/0x80 [ 345.359059][ C1] ? kasan_save_track+0x3f/0x80 [ 345.359084][ C1] ? kasan_save_free_info+0x40/0x50 [ 345.359120][ C1] ? poison_slab_object+0xe0/0x150 [ 345.359147][ C1] ? __kasan_slab_free+0x37/0x60 [ 345.359174][ C1] ? kfree+0x149/0x360 [ 345.359207][ C1] ? dummy_timer+0x7ce/0x45d0 [ 345.359231][ C1] ? __hrtimer_run_queues+0x59d/0xd50 [ 345.359265][ C1] ? hrtimer_interrupt+0x396/0x990 [ 345.359297][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 345.359333][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 345.359363][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.359400][ C1] ? unwind_next_frame+0x1e77/0x2a00 [ 345.359433][ C1] ? arch_stack_walk+0x151/0x1b0 [ 345.359469][ C1] ? stack_trace_save+0x118/0x1d0 [ 345.359506][ C1] ? kasan_save_track+0x3f/0x80 [ 345.359531][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 345.359559][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 345.359595][ C1] ? skb_clone+0x20c/0x390 [ 345.359629][ C1] ? hsr_forward_skb+0x1145/0x2680 [ 345.359662][ C1] ? send_hsr_supervision_frame+0x660/0xce0 [ 345.359693][ C1] ? hsr_announce+0x1ab/0x370 [ 345.359719][ C1] ? call_timer_fn+0x190/0x650 [ 345.359748][ C1] ? __run_timer_base+0x66a/0x8e0 [ 345.359772][ C1] ? run_timer_softirq+0xb7/0x170 [ 345.359798][ C1] ? handle_softirqs+0x2c6/0x970 [ 345.359820][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 345.359842][ C1] ? irq_exit_rcu+0x9/0x30 [ 345.359888][ C1] ? dummy_timer+0x7ce/0x45d0 [ 345.359911][ C1] kasan_save_free_info+0x40/0x50 [ 345.359949][ C1] poison_slab_object+0xe0/0x150 [ 345.359980][ C1] __kasan_slab_free+0x37/0x60 [ 345.360008][ C1] ? dummy_timer+0x7ce/0x45d0 [ 345.360031][ C1] kfree+0x149/0x360 [ 345.360069][ C1] dummy_timer+0x7ce/0x45d0 [ 345.360101][ C1] ? __pfx_lock_release+0x10/0x10 [ 345.360141][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.360167][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 345.360210][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.360237][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 345.360283][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 345.360317][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 345.360343][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 345.360380][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 345.360423][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 345.360462][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.360493][ C1] hrtimer_interrupt+0x396/0x990 [ 345.360549][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 345.360590][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 345.360629][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.360667][ C1] RIP: 0010:unwind_next_frame+0x1e77/0x2a00 [ 345.360703][ C1] Code: eb 0c e8 6c 19 55 00 eb 05 e8 65 19 55 00 bf 01 00 00 00 e8 5b 8f 24 00 65 8b 1d 6c c6 c2 7e 31 ff 89 de e8 8b 1d 55 00 85 db <0f> 84 9d 02 00 00 e8 3e 19 55 00 b0 01 e9 1d fd ff ff 80 3d e9 ab [ 345.360721][ C1] RSP: 0018:ffffc90000a18368 EFLAGS: 00000282 [ 345.360741][ C1] RAX: 0000000080000302 RBX: 0000000080000302 RCX: 0000000000000303 [ 345.360756][ C1] RDX: ffff88807c153c00 RSI: 0000000080000302 RDI: 0000000000000000 [ 345.360772][ C1] RBP: ffffc90000a18440 R08: ffffffff81410e65 R09: ffffffff8141095f [ 345.360790][ C1] R10: 0000000000000003 R11: ffff88807c153c00 R12: ffffc90000a18ff0 [ 345.360807][ C1] R13: dffffc0000000000 R14: ffffc90000a11000 R15: ffffc90000a18ff8 [ 345.360830][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 345.360863][ C1] ? unwind_next_frame+0x1e75/0x2a00 [ 345.360903][ C1] ? unwind_next_frame+0x1e75/0x2a00 [ 345.360944][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 345.360970][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 345.360992][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.361034][ C1] arch_stack_walk+0x151/0x1b0 [ 345.361076][ C1] ? irq_exit_rcu+0x9/0x30 [ 345.361103][ C1] stack_trace_save+0x118/0x1d0 [ 345.361140][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.361163][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 345.361190][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 345.361240][ C1] kasan_save_track+0x3f/0x80 [ 345.361266][ C1] ? kasan_save_track+0x3f/0x80 [ 345.361291][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 345.361318][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 345.361355][ C1] ? skb_clone+0x20c/0x390 [ 345.361385][ C1] ? hsr_forward_skb+0x1145/0x2680 [ 345.361417][ C1] ? send_hsr_supervision_frame+0x660/0xce0 [ 345.361448][ C1] ? hsr_announce+0x1ab/0x370 [ 345.361475][ C1] ? call_timer_fn+0x190/0x650 [ 345.361503][ C1] ? __run_timer_base+0x66a/0x8e0 [ 345.361527][ C1] ? run_timer_softirq+0xb7/0x170 [ 345.361553][ C1] ? handle_softirqs+0x2c6/0x970 [ 345.361575][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 345.361633][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.361659][ C1] __kasan_slab_alloc+0x66/0x80 [ 345.361688][ C1] ? skb_clone+0x20c/0x390 [ 345.361719][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 345.361760][ C1] skb_clone+0x20c/0x390 [ 345.361795][ C1] hsr_forward_skb+0x1145/0x2680 [ 345.361841][ C1] ? hsr_forward_skb+0xae/0x2680 [ 345.361877][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 345.361915][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.361938][ C1] ? __asan_memset+0x23/0x50 [ 345.361962][ C1] ? __skb_pad+0x3d7/0x5c0 [ 345.361993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.362022][ C1] send_hsr_supervision_frame+0x660/0xce0 [ 345.362061][ C1] hsr_announce+0x1ab/0x370 [ 345.362090][ C1] ? hsr_announce+0xa3/0x370 [ 345.362118][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.362148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.362172][ C1] ? call_timer_fn+0xa8/0x650 [ 345.362206][ C1] call_timer_fn+0x190/0x650 [ 345.362236][ C1] ? call_timer_fn+0xc0/0x650 [ 345.362265][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.362293][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 345.362326][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.362356][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.362384][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.362412][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.362433][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.362456][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 345.362488][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.362518][ C1] __run_timer_base+0x66a/0x8e0 [ 345.362554][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 345.362586][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.362618][ C1] run_timer_softirq+0xb7/0x170 [ 345.362650][ C1] handle_softirqs+0x2c6/0x970 [ 345.362677][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 345.362705][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 345.362731][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.362755][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 345.362793][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 345.362817][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 345.362844][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.362871][ C1] irq_exit_rcu+0x9/0x30 [ 345.362892][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 345.362924][ C1] [ 345.362931][ C1] [ 345.362940][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.362978][ C1] RIP: 0010:unwind_next_frame+0x1d89/0x2a00 [ 345.363012][ C1] Code: c0 0f 85 5a 09 00 00 44 8b 75 00 44 89 f7 8b 9c 24 8c 00 00 00 89 de e8 05 1c 55 00 41 39 de 0f 85 c4 00 00 00 48 8b 44 24 58 <42> 80 3c 28 00 74 0a 48 8b 7c 24 50 e8 46 cf ba 00 4c 8b 65 38 48 [ 345.363030][ C1] RSP: 0018:ffffc90009737468 EFLAGS: 00000246 [ 345.363049][ C1] RAX: 1ffff920012e6eaf RBX: 0000000000000001 RCX: ffff88807c153c00 [ 345.363065][ C1] RDX: ffff88807c153c00 RSI: 0000000000000001 RDI: 0000000000000001 [ 345.363080][ C1] RBP: ffffc90009737540 R08: ffffffff81410d6b R09: ffffffff8141095f [ 345.363098][ C1] R10: 0000000000000003 R11: ffff88807c153c00 R12: ffffc90009737db8 [ 345.363115][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920012e6ea8 [ 345.363136][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 345.363169][ C1] ? unwind_next_frame+0x1d7b/0x2a00 [ 345.363209][ C1] ? unwind_next_frame+0x1d7b/0x2a00 [ 345.363250][ C1] ? get_signal+0x16a1/0x1740 [ 345.363289][ C1] ? get_signal+0x16a1/0x1740 [ 345.363325][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.363366][ C1] arch_stack_walk+0x151/0x1b0 [ 345.363409][ C1] ? arch_do_signal_or_restart+0x96/0x860 [ 345.363444][ C1] stack_trace_save+0x118/0x1d0 [ 345.363486][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 345.363527][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.363559][ C1] save_stack+0xfb/0x1f0 [ 345.363595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.363619][ C1] ? __pfx_save_stack+0x10/0x10 [ 345.363658][ C1] ? free_unref_page+0xd22/0xea0 [ 345.363691][ C1] ? vfree+0x186/0x2e0 [ 345.363711][ C1] ? kcov_close+0x2b/0x50 [ 345.363735][ C1] ? __fput+0x24c/0x8a0 [ 345.363756][ C1] ? task_work_run+0x251/0x310 [ 345.363788][ C1] ? do_exit+0xa27/0x27e0 [ 345.363817][ C1] ? do_group_exit+0x207/0x2c0 [ 345.363847][ C1] ? get_signal+0x16a1/0x1740 [ 345.363891][ C1] ? page_ext_get+0x20/0x2a0 [ 345.363927][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.363953][ C1] __reset_page_owner+0x75/0x3f0 [ 345.363990][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.364013][ C1] ? mod_memcg_page_state+0x4ae/0x770 [ 345.364041][ C1] free_unref_page+0xd22/0xea0 [ 345.364079][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.364106][ C1] vfree+0x186/0x2e0 [ 345.364130][ C1] kcov_close+0x2b/0x50 [ 345.364155][ C1] ? __pfx_kcov_close+0x10/0x10 [ 345.364180][ C1] __fput+0x24c/0x8a0 [ 345.364211][ C1] task_work_run+0x251/0x310 [ 345.364249][ C1] ? __pfx_task_work_run+0x10/0x10 [ 345.364285][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.364308][ C1] ? kmem_cache_free+0x145/0x350 [ 345.364350][ C1] do_exit+0xa27/0x27e0 [ 345.364385][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.364410][ C1] ? __pfx_do_exit+0x10/0x10 [ 345.364441][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.364481][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.364503][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.364531][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.364556][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 345.364599][ C1] do_group_exit+0x207/0x2c0 [ 345.364634][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.364655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.364679][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 345.364714][ C1] get_signal+0x16a1/0x1740 [ 345.364763][ C1] ? __pfx_get_signal+0x10/0x10 [ 345.364799][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 345.364840][ C1] arch_do_signal_or_restart+0x96/0x860 [ 345.364873][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 345.364903][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.364940][ C1] ? syscall_exit_to_user_mode+0xa3/0x360 [ 345.364977][ C1] syscall_exit_to_user_mode+0xc9/0x360 [ 345.365015][ C1] do_syscall_64+0x100/0x230 [ 345.365055][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.365091][ C1] RIP: 0033:0x7fdd04575c97 [ 345.365108][ C1] Code: Unable to access opcode bytes at 0x7fdd04575c6d. [ 345.365120][ C1] RSP: 002b:00007ffe42cbecf8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 345.365142][ C1] RAX: 0000000000000000 RBX: 00007fdd03fff6c0 RCX: 00007fdd04575c97 [ 345.365159][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fdd03fe0000 [ 345.365175][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 345.365190][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe42cbef50 [ 345.365206][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 345.365235][ C1] [ 346.737783][ C1] sched: RT throttling activated [ 346.792191][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 346.799069][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 346.808974][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 346.819044][ T30] Call Trace: [ 346.822330][ T30] [ 346.825270][ T30] dump_stack_lvl+0x241/0x360 [ 346.829985][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.835212][ T30] ? __pfx__printk+0x10/0x10 [ 346.839826][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 346.845835][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.851486][ T30] ? vscnprintf+0x5d/0x90 [ 346.855836][ T30] panic+0x349/0x860 [ 346.859754][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.865407][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 346.871582][ T30] ? __pfx_panic+0x10/0x10 [ 346.876021][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 346.881423][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.887102][ T30] ? __irq_work_queue_local+0x137/0x410 [ 346.892666][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.898313][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 346.903705][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 346.909879][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 346.916055][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.921701][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 346.927876][ T30] watchdog+0x101d/0x1020 [ 346.932231][ T30] ? watchdog+0x1ea/0x1020 [ 346.936672][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.941368][ T30] kthread+0x2f2/0x390 [ 346.945467][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.950194][ T30] ? __pfx_kthread+0x10/0x10 [ 346.954808][ T30] ret_from_fork+0x4d/0x80 [ 346.959249][ T30] ? __pfx_kthread+0x10/0x10 [ 346.963863][ T30] ret_from_fork_asm+0x1a/0x30 [ 346.968674][ T30] [ 346.971911][ T30] Kernel Offset: disabled [ 346.976231][ T30] Rebooting in 86400 seconds..