last executing test programs: 41.105328813s ago: executing program 1 (id=25): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x30, 0x60, 0x53, 0xfffff024}, {0x6, 0x17, 0x8, 0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 40.071279722s ago: executing program 1 (id=28): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x6, @empty, 0xd261}, 0x1c, 0x0}}], 0x1, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 39.406514559s ago: executing program 1 (id=32): socket$igmp(0x2, 0x3, 0x2) unshare(0x26020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 38.564968775s ago: executing program 1 (id=36): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000440)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@quiet}, {@utf8}, {@uni_xlate}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@numtail}, {@fat=@sys_immutable}, {@numtail}]}, 0x0, 0x29a, &(0x7f0000000dc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 37.478185287s ago: executing program 1 (id=41): socket$inet6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/19, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r1], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 36.57569421s ago: executing program 1 (id=44): syz_emit_ethernet(0x22, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x89, 0x0, @private=0xa010101, @empty}}}}}, 0x0) gettid() getuid() fstat(0xffffffffffffffff, &(0x7f00000000c0)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x22, 0x6, 0x8001) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='clear_refs\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) write$sysctl(r0, &(0x7f0000000140)='4\x00', 0x2) 34.291376291s ago: executing program 32 (id=44): syz_emit_ethernet(0x22, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x89, 0x0, @private=0xa010101, @empty}}}}}, 0x0) gettid() getuid() fstat(0xffffffffffffffff, &(0x7f00000000c0)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x22, 0x6, 0x8001) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='clear_refs\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) write$sysctl(r0, &(0x7f0000000140)='4\x00', 0x2) 11.623637555s ago: executing program 3 (id=121): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x6ab7, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x42000000, 0x4) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4bbbfe, 0x0) 8.247822125s ago: executing program 4 (id=130): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000280)='./bus\x00') lseek(0xffffffffffffffff, 0x0, 0x2) 7.455466132s ago: executing program 4 (id=132): syz_emit_vhci(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 6.624121832s ago: executing program 4 (id=135): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x0, 0x8, 0x1, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 5.955809103s ago: executing program 2 (id=137): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x22c82, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write(r2, &(0x7f0000000240)="2cd889f03e14f3", 0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.591980359s ago: executing program 4 (id=138): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.047024534s ago: executing program 3 (id=139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0", 0x4a}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x3}], 0x1}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x212e}], 0x1, 0x9e) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac2, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) 4.924799665s ago: executing program 2 (id=140): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="01", 0x1}], 0x1, 0x7, 0x5, 0x0) write$FUSE_POLL(r3, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0x18) 4.593071948s ago: executing program 0 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.211239092s ago: executing program 2 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0x8, 0xd}, {0x6, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24040014) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r1}) 3.911616853s ago: executing program 0 (id=143): socket(0x400000000010, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r1, @ANYBLOB="05005b"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="20003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0xd0) 3.875081034s ago: executing program 4 (id=144): madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) setresuid(0xee01, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$binfmt_format(r0, &(0x7f0000000140)='1\x00', 0x2) 3.453275579s ago: executing program 3 (id=145): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x6a7345, 0x20d35}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 3.336797212s ago: executing program 2 (id=146): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x2000, 0x0, 0xad, 0x628, 0x0, [{0x8, 0x9, 0x6, '\x00', 0x9}, {0x6, 0x3, 0x3, '\x00', 0xe}, {0x3, 0x48, 0x6, '\x00', 0x4}, {0x7, 0x1, 0x13, '\x00', 0x9f}, {0x5, 0xd, 0x80, '\x00', 0x40}, {0x2, 0x8, 0x9, '\x00', 0x3}, {0xa, 0x40, 0x6, '\x00', 0x5}, {0x8, 0x7, 0x7f, '\x00', 0x4}, {0x4, 0xc, 0xf9, '\x00', 0x1}, {0x5, 0x3, 0x9, '\x00', 0x5e}, {0xf8, 0x9c, 0x81, '\x00', 0x7}, {0x8, 0x1, 0x2, '\x00', 0x4}, {0x9, 0x1, 0x96, '\x00', 0x2}, {0x9, 0x9, 0x1, '\x00', 0x5}, {0x5, 0x3, 0xa, '\x00', 0xf9}, {0x8, 0xfb, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x5, '\x00', 0xd4}, {0x1, 0xf, 0x9, '\x00', 0x5}, {0x4, 0x0, 0x4, '\x00', 0x1}, {0x80, 0x3, 0x4, '\x00', 0x4}, {0xfa, 0xfa, 0x1, '\x00', 0x5}, {0x0, 0x2, 0x0, '\x00', 0xf7}, {0xcd, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x9d, 0xf8, '\x00', 0xd1}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 3.105317649s ago: executing program 0 (id=147): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@session={'session', 0x3d, 0x7}}, {@check_strict}, {@check_strict}, {}, {@dmode={'dmode', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@nocompress}, {@utf8}]}, 0x0, 0x3fc, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0x4f) 2.993085049s ago: executing program 4 (id=148): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x6ab7, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x42000000, 0x4) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4bbbfe, 0x0) 2.694523336s ago: executing program 3 (id=149): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x22c82, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write(r2, &(0x7f0000000240)="2cd889f03e14f3", 0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.253186727s ago: executing program 0 (id=150): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_read_part_table(0x4067, &(0x7f0000004540)="$eJzszzFKA1EQBuA/iUteZCEIWglisJe1s9pbpJecwVrFvYmleABPZOkVVoyYoKZIoYjyfcUw84aZ9174I8oqGyR5XDzsJTmepWuat+bOe3+yHmrOUu2WYeokl193zu9//t0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBvG25zfL1Ox6+hrMrFYbqrNud1Ug6mye0oVXs0yH4yO92wd5Q8JRkkeU4yn37XPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+3iQzX+3K43Dk2W8e4kXVst05skfd/3W15aUvLC7hwTAADAIABayZU0pRn8IQH32bcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABlBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAMAAAAgzN86j/YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xgNEuk=") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x8041, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000d80)='ns/time\x00') 2.216512078s ago: executing program 2 (id=151): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="01", 0x1}], 0x1, 0x7, 0x5, 0x0) write$FUSE_POLL(r3, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0x18) 1.645137588s ago: executing program 3 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.511877224s ago: executing program 2 (id=153): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 899.609062ms ago: executing program 3 (id=154): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7) 628.862265ms ago: executing program 0 (id=155): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 333.104283ms ago: executing program 5 (id=47): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 0s ago: executing program 0 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x41ec03, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 192.340964][ T5773] cgroup: Unknown subsys name 'net' [ 192.476745][ T5773] cgroup: Unknown subsys name 'cpuset' [ 192.492459][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 199.004920][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.395129][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.409433][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.420832][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.433068][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.436101][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.442768][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.451421][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.468929][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.486868][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.502900][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.517054][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.526403][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.542893][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.555469][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.563178][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.573685][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.575934][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.583340][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.606209][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.614483][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.617083][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.640281][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.655498][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.675501][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.693918][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.147217][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 205.444032][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 205.621902][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 205.662504][ T5088] Bluetooth: hci0: command tx timeout [ 205.668359][ T5088] Bluetooth: hci2: command tx timeout [ 205.673947][ T5088] Bluetooth: hci1: command tx timeout [ 205.738188][ T5088] Bluetooth: hci3: command tx timeout [ 205.817182][ T5088] Bluetooth: hci4: command tx timeout [ 206.024364][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 206.115913][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 206.579794][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.587560][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.596667][ T5792] bridge_slave_0: entered allmulticast mode [ 206.607058][ T5792] bridge_slave_0: entered promiscuous mode [ 206.679544][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.689599][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.697530][ T5792] bridge_slave_1: entered allmulticast mode [ 206.707674][ T5792] bridge_slave_1: entered promiscuous mode [ 207.084397][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.150259][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.158299][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.166261][ T5789] bridge_slave_0: entered allmulticast mode [ 207.176184][ T5789] bridge_slave_0: entered promiscuous mode [ 207.252764][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.265029][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.272639][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.280730][ T5790] bridge_slave_0: entered allmulticast mode [ 207.290523][ T5790] bridge_slave_0: entered promiscuous mode [ 207.403026][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.410905][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.423513][ T5790] bridge_slave_1: entered allmulticast mode [ 207.433150][ T5790] bridge_slave_1: entered promiscuous mode [ 207.442587][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.450305][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.458327][ T5789] bridge_slave_1: entered allmulticast mode [ 207.468042][ T5789] bridge_slave_1: entered promiscuous mode [ 207.598444][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.607980][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.615859][ T5798] bridge_slave_0: entered allmulticast mode [ 207.624331][ T5798] bridge_slave_0: entered promiscuous mode [ 207.736757][ T5088] Bluetooth: hci1: command tx timeout [ 207.742393][ T5088] Bluetooth: hci2: command tx timeout [ 207.745221][ T5799] Bluetooth: hci0: command tx timeout [ 207.830133][ T5088] Bluetooth: hci3: command tx timeout [ 207.840018][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.849782][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.857615][ T5798] bridge_slave_1: entered allmulticast mode [ 207.867198][ T5798] bridge_slave_1: entered promiscuous mode [ 207.886843][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.898931][ T5088] Bluetooth: hci4: command tx timeout [ 207.916868][ T5792] team0: Port device team_slave_0 added [ 207.924467][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.932363][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.940306][ T5804] bridge_slave_0: entered allmulticast mode [ 207.949976][ T5804] bridge_slave_0: entered promiscuous mode [ 207.971806][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.074241][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.091912][ T5792] team0: Port device team_slave_1 added [ 208.100503][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.111136][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.119073][ T5804] bridge_slave_1: entered allmulticast mode [ 208.128161][ T5804] bridge_slave_1: entered promiscuous mode [ 208.188573][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.248673][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.420348][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.517295][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.529341][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.536937][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.563206][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.584271][ T5790] team0: Port device team_slave_0 added [ 208.638016][ T5789] team0: Port device team_slave_0 added [ 208.656868][ T5789] team0: Port device team_slave_1 added [ 208.676581][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.725738][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.732841][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.759347][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.779252][ T5790] team0: Port device team_slave_1 added [ 208.929190][ T5804] team0: Port device team_slave_0 added [ 209.021686][ T5798] team0: Port device team_slave_0 added [ 209.031689][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.039907][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.066295][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.120045][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.127422][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.153776][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.195900][ T5804] team0: Port device team_slave_1 added [ 209.209987][ T5798] team0: Port device team_slave_1 added [ 209.219633][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.226971][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.253186][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.325169][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.332333][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.358824][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.581200][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.589016][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.615548][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.643494][ T5792] hsr_slave_0: entered promiscuous mode [ 209.656673][ T5792] hsr_slave_1: entered promiscuous mode [ 209.679412][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.686701][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.713061][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.730160][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.737592][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.764220][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.812090][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.819822][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.820996][ T5088] Bluetooth: hci0: command tx timeout [ 209.846782][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.852346][ T5088] Bluetooth: hci1: command tx timeout [ 209.867203][ T5799] Bluetooth: hci2: command tx timeout [ 209.906218][ T5793] Bluetooth: hci3: command tx timeout [ 209.984999][ T5793] Bluetooth: hci4: command tx timeout [ 210.110437][ T5790] hsr_slave_0: entered promiscuous mode [ 210.121278][ T5790] hsr_slave_1: entered promiscuous mode [ 210.130441][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 210.136636][ T5790] Cannot create hsr debugfs directory [ 210.200275][ T5789] hsr_slave_0: entered promiscuous mode [ 210.210905][ T5789] hsr_slave_1: entered promiscuous mode [ 210.220092][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 210.226223][ T5789] Cannot create hsr debugfs directory [ 210.589748][ T5804] hsr_slave_0: entered promiscuous mode [ 210.600079][ T5804] hsr_slave_1: entered promiscuous mode [ 210.608860][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 210.614899][ T5804] Cannot create hsr debugfs directory [ 210.811110][ T5798] hsr_slave_0: entered promiscuous mode [ 210.821421][ T5798] hsr_slave_1: entered promiscuous mode [ 210.829588][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 210.835741][ T5798] Cannot create hsr debugfs directory [ 211.895397][ T5793] Bluetooth: hci1: command tx timeout [ 211.901122][ T5799] Bluetooth: hci0: command tx timeout [ 211.906969][ T5799] Bluetooth: hci2: command tx timeout [ 211.975096][ T5088] Bluetooth: hci3: command tx timeout [ 212.055156][ T5088] Bluetooth: hci4: command tx timeout [ 212.078724][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.102224][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.181300][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.217814][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.341138][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.442138][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.491656][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.534492][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.763249][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.807403][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.886068][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.922598][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.956682][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.992342][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.020104][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.076299][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.367935][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.452693][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.537737][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.590794][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.676167][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.912278][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.004237][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.011964][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.066044][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.158960][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.166699][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.376376][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.477450][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.485236][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.626498][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.660917][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.668606][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.760463][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.031853][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.077293][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.169453][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.177065][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.322832][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.330482][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.348336][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.355967][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.372643][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.380285][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.577879][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.960039][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.061175][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.069127][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.273301][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.280989][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.453786][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.631753][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.993208][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.257744][ T5790] veth0_vlan: entered promiscuous mode [ 218.363791][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.422078][ T5790] veth1_vlan: entered promiscuous mode [ 218.668931][ T5789] veth0_vlan: entered promiscuous mode [ 218.801536][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.861751][ T5790] veth0_macvtap: entered promiscuous mode [ 218.878856][ T5789] veth1_vlan: entered promiscuous mode [ 218.990688][ T5804] veth0_vlan: entered promiscuous mode [ 219.024435][ T5790] veth1_macvtap: entered promiscuous mode [ 219.154046][ T5804] veth1_vlan: entered promiscuous mode [ 219.338899][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.353607][ T5789] veth0_macvtap: entered promiscuous mode [ 219.441786][ T5789] veth1_macvtap: entered promiscuous mode [ 219.534077][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.622152][ T5798] veth0_vlan: entered promiscuous mode [ 219.688307][ T3494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.718035][ T5804] veth0_macvtap: entered promiscuous mode [ 219.760209][ T3494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.794855][ T5804] veth1_macvtap: entered promiscuous mode [ 219.816778][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.842094][ T3494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.854050][ T5798] veth1_vlan: entered promiscuous mode [ 219.929855][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.991603][ T3494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.087583][ T3494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.109930][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.142043][ T3494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.181345][ T3494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.225701][ T3494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.259932][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.367952][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.392770][ T5798] veth0_macvtap: entered promiscuous mode [ 220.431687][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.498659][ T5798] veth1_macvtap: entered promiscuous mode [ 220.515632][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.566446][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.741253][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.897886][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.035457][ T3494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.046282][ T5792] veth0_vlan: entered promiscuous mode [ 221.117645][ T3494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.171654][ T3494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.247542][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.269542][ T5792] veth1_vlan: entered promiscuous mode [ 221.676435][ T5792] veth0_macvtap: entered promiscuous mode [ 221.789412][ T5792] veth1_macvtap: entered promiscuous mode [ 222.004356][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.090929][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.274875][ T3723] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.285032][ T3877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.294084][ T3877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.368570][ T3877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.298454][ T5079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.307708][ T5079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.475115][ T3877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.483265][ T3877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.979971][ T5790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 227.997365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.006686][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.200882][ T3723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.209841][ T3723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.364655][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.374824][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.443548][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.451844][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.749935][ T5845] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 228.798282][ T3723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.806534][ T3723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.928835][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.937369][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.006401][ T5845] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 229.015564][ T5845] usb 2-1: config 1 has no interface number 0 [ 229.021908][ T5845] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.033599][ T5845] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 229.044341][ T5845] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.345280][ T5845] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 229.354999][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.363247][ T5845] usb 2-1: Product: syz [ 229.367880][ T5845] usb 2-1: Manufacturer: syz [ 229.372699][ T5845] usb 2-1: SerialNumber: syz [ 229.565299][ T5974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.573540][ T5974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.695590][ T5845] usb 2-1: Expected 3 endpoints, found: 1 [ 230.242343][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 230.870642][ T3877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.879069][ T3877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.989332][ T6000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.203426][ T3877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.211833][ T3877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.735261][ T5845] usb 2-1: USB disconnect, device number 2 [ 231.917304][ T6007] pimreg: tun_chr_ioctl cmd 2148553947 [ 232.213063][ T6010] Bluetooth: MGMT ver 1.23 [ 232.247113][ T6012] sd 0:0:1:0: PR command failed: 1026 [ 232.252924][ T6012] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 232.263969][ T6012] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 232.513855][ T6018] kernel profiling enabled (shift: 7) [ 232.767546][ T6020] overlayfs: failed to resolve './file0': -2 [ 233.059706][ T6023] loop4: detected capacity change from 0 to 128 [ 233.133817][ T6023] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 233.827987][ T6031] syzkaller0: entered promiscuous mode [ 233.833790][ T6031] syzkaller0: entered allmulticast mode [ 234.826361][ T6042] netlink: 92 bytes leftover after parsing attributes in process `syz.4.27'. [ 234.894875][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.901807][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.082544][ T6047] fuse: Bad value for 'fd' [ 235.668889][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 236.608712][ T6062] loop1: detected capacity change from 0 to 128 [ 236.667115][ T6062] ======================================================= [ 236.667115][ T6062] WARNING: The mand mount option has been deprecated and [ 236.667115][ T6062] and is ignored by this kernel. Remove the mand [ 236.667115][ T6062] option from the mount to silence this warning. [ 236.667115][ T6062] ======================================================= [ 237.110928][ T6070] syzkaller0: entered promiscuous mode [ 237.116989][ T6070] syzkaller0: entered allmulticast mode [ 238.107931][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.171682][ T6074] fuse: Bad value for 'fd' [ 238.371647][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.628928][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.860695][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.350102][ T35] bridge_slave_1: left allmulticast mode [ 239.356334][ T35] bridge_slave_1: left promiscuous mode [ 239.363045][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.393597][ T35] bridge_slave_0: left allmulticast mode [ 239.399801][ T35] bridge_slave_0: left promiscuous mode [ 239.406707][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.927665][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.972711][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.989609][ T35] bond0 (unregistering): Released all slaves [ 240.668331][ T35] hsr_slave_0: left promiscuous mode [ 240.705758][ T35] hsr_slave_1: left promiscuous mode [ 240.714124][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.721923][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.818078][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.826315][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.970778][ T35] veth1_macvtap: left promiscuous mode [ 240.977026][ T35] veth0_macvtap: left promiscuous mode [ 240.983122][ T35] veth1_vlan: left promiscuous mode [ 240.988877][ T35] veth0_vlan: left promiscuous mode [ 242.175723][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.185594][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.197972][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.212139][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.224185][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.321809][ T6108] loop0: detected capacity change from 0 to 16 [ 242.426458][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 242.519737][ T6108] erofs (device loop0): mounted with root inode @ nid 36. [ 242.656838][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 243.025701][ T35] team0 (unregistering): Port device team_slave_1 removed [ 243.193211][ T35] team0 (unregistering): Port device team_slave_0 removed [ 244.296810][ T5793] Bluetooth: hci1: command tx timeout [ 244.713280][ T6137] overlayfs: missing 'lowerdir' [ 245.576510][ T6147] process 'syz.2.66' launched './file2' with NULL argv: empty string added [ 246.123130][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 246.379001][ T5793] Bluetooth: hci1: command tx timeout [ 246.475844][ T6156] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 246.666091][ T6156] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 246.672752][ T6156] pim6reg0: persist disabled [ 247.422491][ T6168] fuse: Bad value for 'fd' [ 247.634874][ T6169] syzkaller0: entered promiscuous mode [ 247.640602][ T6169] syzkaller0: entered allmulticast mode [ 248.271863][ T6177] loop4: detected capacity change from 0 to 512 [ 248.329379][ T6177] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.457310][ T5793] Bluetooth: hci1: command tx timeout [ 248.611525][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.619207][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.627107][ T6102] bridge_slave_0: entered allmulticast mode [ 248.637095][ T6102] bridge_slave_0: entered promiscuous mode [ 248.733469][ T6181] ------------[ cut here ]------------ [ 248.740366][ T6181] WARNING: CPU: 1 PID: 6181 at fs/exec.c:119 path_noexec+0x2ac/0x310 [ 248.752083][ T6181] Modules linked in: [ 248.757464][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(none) [ 248.767015][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.777579][ T6181] RIP: 0010:path_noexec+0x2ac/0x310 [ 248.783247][ T6181] Code: 49 89 ff 8b 7d d4 e8 f3 66 e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 e3 66 e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 15 94 3e ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 a5 5b e1 ff 48 8b 00 48 89 45 c8 [ 248.803465][ T6181] RSP: 0018:ffff88801d7afbc0 EFLAGS: 00010287 [ 248.810321][ T6181] RAX: ffffffff82b5a7db RBX: ffff888116640b60 RCX: 0000000000080000 [ 248.818914][ T6181] RDX: ffffc90008802000 RSI: 0000000000000059 RDI: 000000000000005a [ 248.827251][ T6181] RBP: ffff88801d7afc00 R08: ffffea000000000f R09: 0000000000000003 [ 248.835781][ T6181] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 248.843967][ T6181] R13: 0000000000000000 R14: ffff888100b5a620 R15: 0000000000000000 [ 248.854328][ T6181] FS: 00007fc6d519b6c0(0000) GS:ffff8881ab09d000(0000) knlGS:0000000000000000 [ 248.864456][ T6181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.871488][ T6181] CR2: 000000110c4f37ec CR3: 000000004ec88000 CR4: 00000000003526f0 [ 248.879900][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.879948][ T6181] Call Trace: [ 248.880045][ T6181] [ 248.888444][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.890691][ T6181] do_mmap+0x1570/0x1d70 [ 248.894292][ T6102] bridge_slave_1: entered allmulticast mode [ 248.901598][ T6181] vm_mmap_pgoff+0x40d/0x770 [ 248.909337][ T6102] bridge_slave_1: entered promiscuous mode [ 248.911346][ T6181] ksys_mmap_pgoff+0x51b/0x7c0 [ 248.927216][ T6181] __x64_sys_mmap+0x19c/0x260 [ 248.932207][ T6181] x64_sys_call+0x18a7/0x3e20 [ 248.941664][ T6181] do_syscall_64+0xd9/0x210 [ 248.950722][ T6181] ? irqentry_exit+0x16/0x60 [ 248.958574][ T6181] ? clear_bhb_loop+0x40/0x90 [ 248.963589][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.970625][ T6181] RIP: 0033:0x7fc6d438eec9 [ 248.975489][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.995658][ T6181] RSP: 002b:00007fc6d519b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 249.004394][ T6181] RAX: ffffffffffffffda RBX: 00007fc6d45e5fa0 RCX: 00007fc6d438eec9 [ 249.012863][ T6181] RDX: 0000000003000000 RSI: 0000000000002000 RDI: 0000200000000000 [ 249.021512][ T6181] RBP: 00007fc6d4411f91 R08: 0000000000000005 R09: 0000000000000000 [ 249.029923][ T6181] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 249.038423][ T6181] R13: 00007fc6d45e6038 R14: 00007fc6d45e5fa0 R15: 00007ffc487176a8 [ 249.046872][ T6181] [ 249.050075][ T6181] ---[ end trace 0000000000000000 ]--- [ 249.323635][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.440674][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.017030][ T6102] team0: Port device team_slave_0 added [ 250.100069][ T6102] team0: Port device team_slave_1 added [ 250.494248][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.501636][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.528427][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.557024][ T5793] Bluetooth: hci1: command tx timeout [ 250.717719][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.727941][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.754961][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.548918][ T6102] hsr_slave_0: entered promiscuous mode [ 251.559543][ T6102] hsr_slave_1: entered promiscuous mode [ 251.568770][ T6102] debugfs: 'hsr0' already exists in 'hsr' [ 251.575659][ T6102] Cannot create hsr debugfs directory [ 252.886778][ T6222] fuse: Bad value for 'fd' [ 253.817425][ T6231] loop3: detected capacity change from 0 to 136 [ 253.858514][ T6231] iso9660: Unknown parameter 'smackfsfloor' [ 254.198769][ T6102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.326805][ T6102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.460518][ T6102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.576462][ T6102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.876380][ T6253] overlayfs: statfs failed on './file0' [ 256.332686][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.610521][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.741888][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.749532][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.889489][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.897151][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.922902][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.358080][ T6306] loop3: detected capacity change from 0 to 16 [ 260.437847][ T6306] erofs (device loop3): mounted with root inode @ nid 36. [ 263.654089][ T6102] veth0_vlan: entered promiscuous mode [ 263.761170][ T6102] veth1_vlan: entered promiscuous mode [ 264.047898][ T6102] veth0_macvtap: entered promiscuous mode [ 264.115794][ T6102] veth1_macvtap: entered promiscuous mode [ 264.487377][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.715484][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.879599][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.915118][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.041665][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.172274][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.474134][ T6428] overlayfs: missing 'lowerdir' [ 271.312681][ T6438] capability: warning: `syz.4.144' uses deprecated v2 capabilities in a way that may be insecure [ 271.958680][ T6448] loop0: detected capacity change from 0 to 136 [ 273.306693][ T6464] overlayfs: missing 'lowerdir' [ 273.674016][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.684662][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.973696][ T5079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.982360][ T5079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.829305][ T6479] ===================================================== [ 274.836722][ T6479] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 274.845223][ T6479] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 274.851185][ T6479] do_xdp_generic+0xd52/0x1690 [ 274.856318][ T6479] tun_get_user+0x45be/0x6d70 [ 274.861222][ T6479] tun_chr_write_iter+0x3e9/0x5c0 [ 274.866564][ T6479] vfs_write+0xbe2/0x15d0 [ 274.871098][ T6479] __x64_sys_write+0x1fb/0x4d0 [ 274.876168][ T6479] x64_sys_call+0x3014/0x3e20 [ 274.881206][ T6479] do_syscall_64+0xd9/0x210 [ 274.886113][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.892233][ T6479] [ 274.894849][ T6479] Uninit was stored to memory at: [ 274.900234][ T6479] pskb_expand_head+0x310/0x1610 [ 274.905522][ T6479] do_xdp_generic+0xa79/0x1690 [ 274.910520][ T6479] tun_get_user+0x45be/0x6d70 [ 274.915534][ T6479] tun_chr_write_iter+0x3e9/0x5c0 [ 274.920755][ T6479] vfs_write+0xbe2/0x15d0 [ 274.925405][ T6479] __x64_sys_write+0x1fb/0x4d0 [ 274.930371][ T6479] x64_sys_call+0x3014/0x3e20 [ 274.935391][ T6479] do_syscall_64+0xd9/0x210 [ 274.940142][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.946365][ T6479] [ 274.948795][ T6479] Uninit was created at: [ 274.953321][ T6479] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 274.960180][ T6479] kmalloc_reserve+0x22f/0x4b0 [ 274.965361][ T6479] __alloc_skb+0x347/0x7d0 [ 274.969991][ T6479] alloc_skb_with_frags+0xc5/0xa60 [ 274.975470][ T6479] sock_alloc_send_pskb+0xad8/0xc70 [ 274.980949][ T6479] tun_get_user+0x1142/0x6d70 [ 274.985947][ T6479] tun_chr_write_iter+0x3e9/0x5c0 [ 274.991181][ T6479] vfs_write+0xbe2/0x15d0 [ 274.995918][ T6479] __x64_sys_write+0x1fb/0x4d0 [ 275.001336][ T6479] x64_sys_call+0x3014/0x3e20 [ 275.006421][ T6479] do_syscall_64+0xd9/0x210 [ 275.011168][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.017379][ T6479] [ 275.019851][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.5.47 Tainted: G W syzkaller #0 PREEMPT(none) [ 275.030905][ T6479] Tainted: [W]=WARN [ 275.035123][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.045456][ T6479] ===================================================== [ 275.052502][ T6479] Disabling lock debugging due to kernel taint [ 275.059018][ T6479] Kernel panic - not syncing: kmsan.panic set ... [ 275.065637][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.5.47 Tainted: G B W syzkaller #0 PREEMPT(none) [ 275.076562][ T6479] Tainted: [B]=BAD_PAGE, [W]=WARN [ 275.081780][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.091967][ T6479] Call Trace: [ 275.095340][ T6479] [ 275.098362][ T6479] __dump_stack+0x26/0x30 [ 275.102997][ T6479] dump_stack_lvl+0x53/0x270 [ 275.107776][ T6479] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 275.113780][ T6479] dump_stack+0x1e/0x25 [ 275.118103][ T6479] vpanic+0x361/0xc50 [ 275.122299][ T6479] panic+0x15d/0x160 [ 275.126451][ T6479] kmsan_report+0x31c/0x320 [ 275.131147][ T6479] ? __msan_warning+0x1b/0x30 [ 275.135976][ T6479] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 275.142094][ T6479] ? do_xdp_generic+0xd52/0x1690 [ 275.147225][ T6479] ? tun_get_user+0x45be/0x6d70 [ 275.152233][ T6479] ? tun_chr_write_iter+0x3e9/0x5c0 [ 275.157589][ T6479] ? vfs_write+0xbe2/0x15d0 [ 275.162260][ T6479] ? __x64_sys_write+0x1fb/0x4d0 [ 275.167371][ T6479] ? x64_sys_call+0x3014/0x3e20 [ 275.172422][ T6479] ? do_syscall_64+0xd9/0x210 [ 275.177324][ T6479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.183593][ T6479] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 275.189606][ T6479] ? ___bpf_prog_run+0xea65/0xeba0 [ 275.194977][ T6479] ? kmsan_get_metadata+0xfb/0x160 [ 275.200273][ T6479] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 275.206828][ T6479] ? kmsan_get_metadata+0x150/0x160 [ 275.212215][ T6479] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 275.218773][ T6479] ? kmsan_get_metadata+0xfb/0x160 [ 275.224067][ T6479] __msan_warning+0x1b/0x30 [ 275.228810][ T6479] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 275.234826][ T6479] do_xdp_generic+0xd52/0x1690 [ 275.239807][ T6479] ? tun_get_user+0x40b1/0x6d70 [ 275.244843][ T6479] ? filter_irq_stacks+0x49/0x190 [ 275.250109][ T6479] ? kmsan_get_metadata+0xfb/0x160 [ 275.255420][ T6479] ? tun_get_user+0x453d/0x6d70 [ 275.260444][ T6479] tun_get_user+0x45be/0x6d70 [ 275.265308][ T6479] ? stack_depot_save_flags+0x35/0x7b0 [ 275.270993][ T6479] ? kmsan_get_metadata+0xfb/0x160 [ 275.276319][ T6479] ? kmsan_get_metadata+0xfb/0x160 [ 275.281618][ T6479] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 275.288184][ T6479] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 275.294552][ T6479] tun_chr_write_iter+0x3e9/0x5c0 [ 275.299802][ T6479] vfs_write+0xbe2/0x15d0 [ 275.304343][ T6479] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 275.310079][ T6479] __x64_sys_write+0x1fb/0x4d0 [ 275.315054][ T6479] x64_sys_call+0x3014/0x3e20 [ 275.319933][ T6479] do_syscall_64+0xd9/0x210 [ 275.324652][ T6479] ? irqentry_exit+0x16/0x60 [ 275.329432][ T6479] ? clear_bhb_loop+0x40/0x90 [ 275.334277][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.340343][ T6479] RIP: 0033:0x7ff168b8d97f [ 275.344879][ T6479] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 275.364662][ T6479] RSP: 002b:00007ff169951000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 275.373335][ T6479] RAX: ffffffffffffffda RBX: 00007ff168de5fa0 RCX: 00007ff168b8d97f [ 275.381456][ T6479] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 00000000000000c8 [ 275.389554][ T6479] RBP: 00007ff168c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 275.397653][ T6479] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 275.405754][ T6479] R13: 00007ff168de6038 R14: 00007ff168de5fa0 R15: 00007fffa3d65368 [ 275.413896][ T6479] [ 275.417392][ T6479] Kernel Offset: disabled [ 275.421801][ T6479] Rebooting in 86400 seconds..