last executing test programs: 34m34.999881753s ago: executing program 32 (id=432): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x92ce, 0x8000, 0xaed, 0x3, r2}, &(0x7f00000001c0)=0x10) 34m12.966268933s ago: executing program 33 (id=552): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 33m43.224725087s ago: executing program 34 (id=622): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x16) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 31m53.186869406s ago: executing program 35 (id=1453): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={r3, 0x1abb}, 0x8) 31m41.106953024s ago: executing program 36 (id=1513): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) 30m47.397356432s ago: executing program 37 (id=1698): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0xb, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 25m59.699791801s ago: executing program 38 (id=2659): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 20m17.731632259s ago: executing program 39 (id=3453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2000000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 19m6.600798067s ago: executing program 40 (id=3623): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x540b, 0x2) 18m11.160465148s ago: executing program 41 (id=3748): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 17m28.285775137s ago: executing program 1 (id=3876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 17m24.117119318s ago: executing program 1 (id=3885): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000002580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 17m23.53672773s ago: executing program 1 (id=3890): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 17m21.765731699s ago: executing program 1 (id=3893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000380), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000480)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd1644701b13403656c86711f6e750026fd442bd0a3ab3aaf47de4a2d041016160e8bef7b30c05e298aa9572540dd95087eef2115e1bc36a7e64cf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac33aaa648c765acc5672dc642dd67d970604a69b4f2276beedc18056ab4bea4c825b69a7a77adcd5488684882b1bb9eb840800000000000000668e8fd0e45c050601202cb546", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}}) 17m20.559462421s ago: executing program 1 (id=3896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) ioctl$int_in(r1, 0x5452, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno', 0x4) shutdown(r0, 0x1) 17m19.985682359s ago: executing program 1 (id=3901): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m4.481430501s ago: executing program 42 (id=3901): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m1.994391288s ago: executing program 43 (id=4012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15m56.115959427s ago: executing program 44 (id=4029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 8m20.318831361s ago: executing program 7 (id=4708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010102, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_AIE_OFF(r3, 0x7002) 8m18.706812231s ago: executing program 7 (id=4714): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8, 0x800007, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x5}, {0x9}}}}, 0xd) 8m13.649378333s ago: executing program 7 (id=4724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 8m8.279467239s ago: executing program 7 (id=4730): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x1c6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) close(r0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) r5 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x2000}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 8m3.158663408s ago: executing program 7 (id=4740): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = socket(0x18, 0x800, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e) sendfile(r4, r3, 0x0, 0x8) 8m1.063985354s ago: executing program 7 (id=4744): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x1}, 0x50) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 7m44.057825455s ago: executing program 45 (id=4744): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x1}, 0x50) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 6m36.41922824s ago: executing program 2 (id=4869): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x0, 0x80001088, 0x73}, 0x2c) 6m33.265380886s ago: executing program 2 (id=4875): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefa}, 0xffffffffffffffa5) sched_setaffinity(0x0, 0x54, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = signalfd4(r1, 0x0, 0x0, 0x1000) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r4}) socket(0x8000000010, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 6m30.720439466s ago: executing program 2 (id=4879): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 6m27.359925161s ago: executing program 2 (id=4883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 6m6.020512639s ago: executing program 2 (id=4921): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 5m59.040101472s ago: executing program 2 (id=4913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) shmctl$IPC_RMID(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 5m43.740701408s ago: executing program 46 (id=4913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) shmctl$IPC_RMID(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 4m33.140021102s ago: executing program 3 (id=5042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) wait4(r5, 0x0, 0x8, 0x0) 4m29.281207901s ago: executing program 3 (id=5046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r0}) connect$inet6(r3, 0x0, 0x0) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000100)=""/109, 0x6d) writev(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m27.881862947s ago: executing program 3 (id=5048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) unshare(0x2040400) r1 = socket$netlink(0x10, 0x3, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x3975266ef201fdf0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 4m26.88541176s ago: executing program 3 (id=5051): getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000000)={0xc0f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x9, 0x9977, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x7, [0x3, 0x0, 0x13, 0x2]}) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4m20.790202104s ago: executing program 3 (id=5071): memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\x01\x00\x00\x00\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xbaL\xd3#\x87|J\xb9\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\x00\x00\x00\x00\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9Z\xd9G\xb6K[\x94\xfd^\xdd\x04\xa1\x83U\x900}!\x8b\x0e,M\xc0D\x15\x02\xde\xda', 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m16.913424654s ago: executing program 3 (id=5064): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0xd94}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102400, 0x19000) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 4m10.268367524s ago: executing program 5 (id=5073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 4m5.328247579s ago: executing program 5 (id=5077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4m1.081884032s ago: executing program 47 (id=5064): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0xd94}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102400, 0x19000) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 4m1.03445188s ago: executing program 5 (id=5082): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000001c0)={0x2, 0x4cf, 0x2f, &(0x7f0000000180)=""/47}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x834, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000002500)='./file7\x00', &(0x7f0000002540), 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616e616d653d62c58c09d6cb19a2712c76657273696f6e3d3970323030302c63616368653d"]) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) 3m59.681428421s ago: executing program 5 (id=5084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 3m54.680186149s ago: executing program 5 (id=5089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 3m50.961556442s ago: executing program 5 (id=5094): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3m35.854403967s ago: executing program 48 (id=5094): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 41.089393668s ago: executing program 4 (id=5311): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') 37.509800995s ago: executing program 4 (id=5314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x154}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x28b}, 0x18) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='[', 0x1}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 34.234890902s ago: executing program 4 (id=5316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc}}, './file0\x00'}) r4 = syz_io_uring_setup(0x4e0a, &(0x7f00000004c0)={0x0, 0xe507, 0x80, 0x2, 0x116, 0x0, r3}, &(0x7f0000000080), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) 29.8768152s ago: executing program 4 (id=5326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) 27.264261739s ago: executing program 4 (id=5329): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x207ffd) mlockall(0x7) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x1, 0x5510, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnbnLTBuI4gP5tcKFfKqq671W6g2P0CF12iThAL8EBuqBX6AU4A9nlCBFEeBwCEYtEHttK9J5khrGGn2cQLGZGGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEs31Wbxb/n9T9uc/aGdPKMBAAAArtlVm0X9ZpbqH5v7n5tbX5t6ERFlRFybu4/i3UXmqMmpHtv/PW9fPenD/4g64fiMSXN9iIgfzXX3petvAQAAAN6u7Wo9T7P19DIbukO0s3xR67RoU376menpRURUs9tMaeUx71umsPr3PY7fmdLqBaxpprC05DbOlfYs9d/9tGo3PSuKVJRXP3bqZLaxAwAAPRpdFP3OQgAAAOjTr6E7wDCKeNjKPG0FTlLRbO+9v6gBAAAAr1AxdAcAAACAztXz/57O/zs4/w8AAACGkc7/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEu7arPYrtbztjn7Qzt5RgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDP/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPxr+3xtCogQUIYgBBIDLDS9lpZuiAEUMfAnIEXptYRe+dFmoFWFyMKGMndBMCKEBApb/4fOrdSlbB1uKBIzyD47cdtIHL/sI/f5SM/ve5bl930vUZSvnxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdrQRZ8VhcRKn1bnbD65vFP2dR/rCzZ27K0Ur4qTFnP8nXmh+SJa7SwQAAID5kdX1fUTcy3fXij5djBi/FXl9TVHzf/PUJK7r+Ufr/rqva/+i/fzT/ef2BlqcjFPc9PzmaHji8VR6/90sZ9vTf3pFr1z58tlLVn5B0ne3nx3n5XomX9269Xa/DI+0kS0A8Hccr/sqqH8fKvpBl4kBMDd6jcK7rv+zxW5zAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjDeDueqOMkIlZ6+3HhzoPrGwf1N3furtTtzI0bO/HF/j2LW+QRcX5zNDzR6mxm25Wr1y6uj0bDy+0HL0ZEV6O/WU3/4vtTXBzx76dRf2t2svJzFqTVWk9x8cKs5Nx90NEPJAAADq28akVdfy/fXSvOJUsRv3/7cP3/SiOOKev/+x+cud0cq1n/D1qb4exb3br0yeqVq9de27y0fmF4YfjR6ycHbwxOnT19+uxq+axk1RMTAAAA/pl+1Zr1f7r0+P7/sUYcU9b/n349+Lw5Vqb+P9D+pl/XmQAAAMy3Z1767dfkgPNJvx+frW9tXR5MjnufT06OHaT6lx2pWrP+z5a6zgoAAABow3g7eWj//1wjjin3/5/87vkfmvfMImKh2v8/vvHx6Fx705lpbfw5cddzBAAAoFsLVWvu/+fl+//p3isPaUS8+vIkrv4N4FT1f/bOl983x2q+/3+qvSnOpHR5sh5lvxzRW+46IwAAAA6zo1Uriv1f8t21D3889l7f+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbfsjAAD//08VOo0=") 21.230481517s ago: executing program 4 (id=5338): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ace000/0x3000)=nil, 0x3000, 0xb635773f04ebbee8, 0x4000010, 0xffffffffffffffff, 0x4000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 20.997827511s ago: executing program 0 (id=5339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 14.846870854s ago: executing program 0 (id=5344): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 14.841647262s ago: executing program 9 (id=5355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 14.831444375s ago: executing program 6 (id=5356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 12.079226566s ago: executing program 8 (id=5346): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 12.076496879s ago: executing program 0 (id=5347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc}}, './file0\x00'}) r4 = syz_io_uring_setup(0x4e0a, &(0x7f00000004c0)={0x0, 0xe507, 0x80, 0x2, 0x116, 0x0, r3}, &(0x7f0000000080), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) 9.092406152s ago: executing program 8 (id=5348): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x10, &(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x3, 0x1f9, &(0x7f00000001c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) getdents64(r4, &(0x7f0000001280)=""/4089, 0xff9) 9.091964609s ago: executing program 6 (id=5349): r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r7 = dup(r3) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 9.073751238s ago: executing program 9 (id=5361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 9.069078394s ago: executing program 0 (id=5350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.713850606s ago: executing program 8 (id=5351): getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) 7.389788709s ago: executing program 6 (id=5352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x3975266ef201fdf0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 6.280765773s ago: executing program 8 (id=5353): getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000000)={0xc0f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x9, 0x9977, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x7, [0x3, 0x0, 0x13, 0x2]}) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.278153325s ago: executing program 6 (id=5367): unshare(0x2040400) r0 = socket$netlink(0x10, 0x3, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x3975266ef201fdf0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 5.573590496s ago: executing program 49 (id=5338): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ace000/0x3000)=nil, 0x3000, 0xb635773f04ebbee8, 0x4000010, 0xffffffffffffffff, 0x4000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 5.007622844s ago: executing program 8 (id=5357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 5.006775571s ago: executing program 9 (id=5369): unshare(0x2040400) r0 = socket$netlink(0x10, 0x3, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x3975266ef201fdf0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 5.002076477s ago: executing program 6 (id=5370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 4.791238892s ago: executing program 9 (id=5358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x4, 0x3, 0x5, {0xb76, 0x9, 0x1, 0x6}}) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) 4.585313142s ago: executing program 0 (id=5359): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) io_setup(0x23, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 2.361703209s ago: executing program 9 (id=5360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 2.243487048s ago: executing program 8 (id=5362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) 1.169301361s ago: executing program 6 (id=5363): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 643.789353ms ago: executing program 0 (id=5364): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x200000, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0xa4000021) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=5365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x20) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): f_netlink_parms(): no params data found [ 1692.343954][ T6523] hsr_slave_0: left promiscuous mode [ 1692.396381][ T6523] hsr_slave_1: left promiscuous mode [ 1692.409484][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.716378][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.057555][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 1699.935532][T22496] loop7: detected capacity change from 0 to 64 [ 1700.009271][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 1700.009294][ T30] audit: type=1804 audit(2000001174.447:800): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4652" name="/newroot/225/file1/file1" dev="loop7" ino=22 res=1 errno=0 [ 1700.042051][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 1705.664090][T22321] chnl_net:caif_netlink_parms(): no params data found [ 1707.978764][T22541] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1708.278968][T22290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.222682][T22290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.230662][T22290] bridge_slave_0: entered allmulticast mode [ 1709.238816][T22290] bridge_slave_0: entered promiscuous mode [ 1709.247951][T22290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.255239][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.262423][T22290] bridge_slave_1: entered allmulticast mode [ 1709.270507][T22290] bridge_slave_1: entered promiscuous mode [ 1709.415562][T22290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.462798][T22290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1710.099491][T22290] team0: Port device team_slave_0 added [ 1710.362312][T22290] team0: Port device team_slave_1 added [ 1710.395673][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.404490][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.411682][T22321] bridge_slave_0: entered allmulticast mode [ 1710.421362][T22321] bridge_slave_0: entered promiscuous mode [ 1710.462479][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.470385][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.478341][T22321] bridge_slave_1: entered allmulticast mode [ 1710.486828][T22321] bridge_slave_1: entered promiscuous mode [ 1710.535346][T22290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.542623][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.575854][T22290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.613955][T22321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1710.623973][T22290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.633457][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.659878][T22290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.678450][T22321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.194174][T22563] loop3: detected capacity change from 0 to 64 [ 1711.206508][T22563] hfs: Bad value for 'uid' [ 1711.904128][T22321] team0: Port device team_slave_0 added [ 1714.065189][T22321] team0: Port device team_slave_1 added [ 1714.186730][T22290] hsr_slave_0: entered promiscuous mode [ 1714.209875][T22290] hsr_slave_1: entered promiscuous mode [ 1714.293812][T22290] debugfs: 'hsr0' already exists in 'hsr' [ 1714.299678][T22290] Cannot create hsr debugfs directory [ 1716.953129][T22321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.960109][T22321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.407924][T22321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.225728][T22321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.543079][T22321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.231694][T22321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.618147][T22582] Set syz1 is full, maxelem 65536 reached [ 1722.487484][T19557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1722.514375][T19557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1722.522378][T19557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1722.543929][T19557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1722.573160][T19557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1722.642670][T22597] lo speed is unknown, defaulting to 1000 [ 1722.670452][ T9585] bridge_slave_1: left allmulticast mode [ 1722.676347][ T9585] bridge_slave_1: left promiscuous mode [ 1722.682122][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.788864][ T9585] bridge_slave_0: left allmulticast mode [ 1722.794914][ T9585] bridge_slave_0: left promiscuous mode [ 1722.800688][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.653243][T19557] Bluetooth: hci4: command tx timeout [ 1724.893881][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.910894][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.924153][ T9585] bond0 (unregistering): Released all slaves [ 1725.029252][ T9585] hsr_slave_0: left promiscuous mode [ 1725.037317][T16161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1725.047885][ T9585] hsr_slave_1: left promiscuous mode [ 1725.050617][T16161] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1725.057136][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.067958][T16161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1725.069264][T16161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1725.083243][T16161] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1725.083302][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1725.174111][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 1725.198966][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 1725.424827][T22614] lo speed is unknown, defaulting to 1000 [ 1725.591357][T22597] chnl_net:caif_netlink_parms(): no params data found [ 1725.761857][T22597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.770063][T22597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.777473][T22597] bridge_slave_0: entered allmulticast mode [ 1725.789760][T22597] bridge_slave_0: entered promiscuous mode [ 1725.797843][T22614] chnl_net:caif_netlink_parms(): no params data found [ 1725.810812][T22597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.818593][T22597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.825925][T22597] bridge_slave_1: entered allmulticast mode [ 1725.834013][T22597] bridge_slave_1: entered promiscuous mode [ 1725.846943][ T9585] bridge_slave_1: left allmulticast mode [ 1725.852593][ T9585] bridge_slave_1: left promiscuous mode [ 1725.858935][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.868241][ T9585] bridge_slave_0: left allmulticast mode [ 1725.873927][ T9585] bridge_slave_0: left promiscuous mode [ 1725.879634][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.010771][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1726.023225][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1726.033594][ T9585] bond0 (unregistering): Released all slaves [ 1726.118079][T22597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.142850][T22597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.173163][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.180944][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.236028][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 1726.273347][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 1726.461497][T22597] team0: Port device team_slave_0 added [ 1726.470806][T22597] team0: Port device team_slave_1 added [ 1726.544536][T22614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.551726][T22614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.559180][T22614] bridge_slave_0: entered allmulticast mode [ 1726.567846][T22614] bridge_slave_0: entered promiscuous mode [ 1726.576833][T22614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.584144][T22614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.591399][T22614] bridge_slave_1: entered allmulticast mode [ 1726.600683][T22614] bridge_slave_1: entered promiscuous mode [ 1726.610087][T22597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.617129][T22597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.643252][T22597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.657669][T22597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.664884][T22597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.691394][T22597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.733015][T19557] Bluetooth: hci4: command tx timeout [ 1726.764287][T22614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.790859][T22614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.825575][T22597] hsr_slave_0: entered promiscuous mode [ 1726.832069][T22597] hsr_slave_1: entered promiscuous mode [ 1726.839215][T22597] debugfs: 'hsr0' already exists in 'hsr' [ 1726.845163][T22597] Cannot create hsr debugfs directory [ 1726.867026][T22614] team0: Port device team_slave_0 added [ 1726.891495][T22614] team0: Port device team_slave_1 added [ 1726.939542][T22614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.946841][T22614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.972824][T22614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.005582][T22614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.012868][T22614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.039456][T22614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.122073][T22614] hsr_slave_0: entered promiscuous mode [ 1727.129145][T22614] hsr_slave_1: entered promiscuous mode [ 1727.134837][T19557] Bluetooth: hci5: command tx timeout [ 1727.136204][T22614] debugfs: 'hsr0' already exists in 'hsr' [ 1727.147187][T22614] Cannot create hsr debugfs directory [ 1727.384036][T22597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1727.396357][T22597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1727.431508][T22597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1727.442058][T22597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1727.566557][T22597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.590387][T22597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.612069][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.619210][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1727.636678][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.643792][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1727.793831][T22614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1727.806673][T22614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1727.820849][T22614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1727.837128][T22614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1727.972543][T22614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.011497][T22597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1728.024026][T22614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.042240][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.049413][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1728.071870][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.079056][ T9816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1728.140096][T22614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1728.442385][T22597] veth0_vlan: entered promiscuous mode [ 1728.451612][T22614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1728.470377][T22597] veth1_vlan: entered promiscuous mode [ 1728.521593][T22597] veth0_macvtap: entered promiscuous mode [ 1728.535535][T22597] veth1_macvtap: entered promiscuous mode [ 1728.561916][T22597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.577359][T22597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.608937][ T6517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.625670][ T6517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.644222][ T6517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.687906][ T6517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.765341][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.775291][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1728.814199][T19557] Bluetooth: hci4: command tx timeout [ 1728.847294][T21666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.856672][T21666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1728.922514][T22614] veth0_vlan: entered promiscuous mode [ 1728.951946][T22614] veth1_vlan: entered promiscuous mode [ 1729.071612][T22614] veth0_macvtap: entered promiscuous mode [ 1729.087611][T22614] veth1_macvtap: entered promiscuous mode [ 1729.214179][T19557] Bluetooth: hci5: command tx timeout [ 1729.251923][T22614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1729.349518][T22614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.433070][T22680] loop5: detected capacity change from 0 to 64 [ 1730.447004][T22680] hfs: Bad value for 'uid' [ 1730.957274][T21666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.986521][T19557] Bluetooth: hci4: command tx timeout [ 1731.037668][T21666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.125934][T21666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.303069][T19557] Bluetooth: hci5: command tx timeout [ 1731.471247][T21666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.006419][T22697] loop7: detected capacity change from 0 to 512 [ 1733.069451][T22697] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1733.152676][T22697] EXT4-fs (loop7): 1 truncate cleaned up [ 1733.162184][T22697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1733.374437][T19557] Bluetooth: hci5: command tx timeout [ 1733.408334][T22705] 9pnet_fd: Insufficient options for proto=fd [ 1733.485742][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.563576][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.217991][ T6517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.243247][T22710] EXT4-fs error (device loop7): ext4_empty_dir:3119: inode #2: block 13: comm syz.7.4685: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1736.248550][ T6517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.364648][T22714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4688'. [ 1737.338913][T22710] EXT4-fs (loop7): Remounting filesystem read-only [ 1738.394106][T18540] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.883175][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.889516][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.114685][T14775] IPVS: starting estimator thread 0... [ 1740.253077][T22739] IPVS: using max 20 ests per chain, 48000 per kthread [ 1744.916192][T22766] loop4: detected capacity change from 0 to 64 [ 1744.923724][T22766] hfs: Bad value for 'uid' [ 1753.594308][T19557] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1763.781630][T22862] loop5: detected capacity change from 0 to 1024 [ 1763.834108][T22862] EXT4-fs: Ignoring removed i_version option [ 1763.840787][T22862] EXT4-fs: inline encryption not supported [ 1763.861008][T22862] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1763.925128][T22875] binder: BINDER_SET_CONTEXT_MGR already set [ 1763.931124][T22875] binder: 22871:22875 ioctl 4018620d 200000004a80 returned -16 [ 1763.989343][T22862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1767.241247][T22597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.059242][T22908] hub 1-0:1.0: USB hub found [ 1770.067306][T22908] hub 1-0:1.0: 1 port detected [ 1774.709310][T22936] loop3: detected capacity change from 0 to 32768 [ 1774.722837][T22936] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4749 (22936) [ 1774.743094][T22936] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1774.753270][T22936] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1775.347868][T22936] BTRFS info (device loop3): enabling ssd optimizations [ 1775.355222][T22936] BTRFS info (device loop3): turning on async discard [ 1775.362035][T22936] BTRFS info (device loop3): enabling free space tree [ 1776.031260][T22957] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4750'. [ 1777.777709][T22967] overlayfs: failed to clone upperpath [ 1777.876832][T20272] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1778.136153][ T30] audit: type=1804 audit(2000001252.567:801): pid=22973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4753" name="/newroot/8/file1" dev="fuse" ino=1 res=1 errno=0 [ 1780.686421][ T9810] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.934403][ T9810] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.317822][ T9810] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.632030][T23040] 9pnet_virtio: no channels available for device syz [ 1792.619290][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4776'. [ 1794.278215][ T9810] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.612968][T14799] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1794.884670][T23064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1795.074990][T14799] usb 6-1: Using ep0 maxpacket: 8 [ 1795.433475][T23064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1795.446477][T23064] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1795.455165][T23064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1795.463612][T23064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1795.477490][T14799] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1795.808922][T14799] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1795.833137][T14799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.844510][T14799] usb 6-1: config 0 descriptor?? [ 1795.852389][T14799] usb 6-1: can't set config #0, error -71 [ 1796.151080][T14799] usb 6-1: USB disconnect, device number 16 [ 1798.212988][T23064] Bluetooth: hci6: command tx timeout [ 1798.363550][T23075] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1798.371317][T23075] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1798.379604][T23075] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1798.387883][T23075] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1798.524453][T23061] lo speed is unknown, defaulting to 1000 [ 1800.253188][T23064] Bluetooth: hci6: command tx timeout [ 1801.352368][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.359860][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.876915][T23064] Bluetooth: hci6: command tx timeout [ 1804.787810][ T9810] bridge_slave_1: left allmulticast mode [ 1804.813152][ T9810] bridge_slave_1: left promiscuous mode [ 1804.818919][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.899144][T23064] Bluetooth: hci6: command tx timeout [ 1804.926739][ T9810] bridge_slave_0: left allmulticast mode [ 1804.945741][ T9810] bridge_slave_0: left promiscuous mode [ 1805.915110][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.136138][T23135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1816.098969][T23179] loop5: detected capacity change from 0 to 2048 [ 1816.107445][T23179] EXT4-fs: inline encryption not supported [ 1817.265931][T23179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1820.520663][T23211] 9pnet_virtio: no channels available for device syz [ 1820.640688][T17572] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1823.327850][T17572] usb 4-1: device descriptor read/64, error -71 [ 1824.187411][ T9810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.200450][ T9810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.211914][ T9810] bond0 (unregistering): Released all slaves [ 1825.151095][T23196] syz_tun: entered allmulticast mode [ 1825.169356][T23196] syz_tun: left allmulticast mode [ 1825.929014][T23251] loop4: detected capacity change from 0 to 512 [ 1825.945854][T23251] ext4: Unknown parameter 'pcr' [ 1826.485755][T22597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.077707][T23061] chnl_net:caif_netlink_parms(): no params data found [ 1830.189537][T23279] Cannot find del_set index 3 as target [ 1832.055826][ T9810] hsr_slave_0: left promiscuous mode [ 1832.659807][ T30] audit: type=1326 audit(2000001307.097:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23286 comm="syz.2.4837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc38f749 code=0x0 [ 1833.733642][ T9810] hsr_slave_1: left promiscuous mode [ 1833.739855][ T9810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1833.759981][ T9810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1833.832575][ T9810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1833.874681][ T9810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1834.797678][ T9810] veth1_macvtap: left promiscuous mode [ 1834.833192][ T9810] veth0_macvtap: left promiscuous mode [ 1835.554422][T23305] loop5: detected capacity change from 0 to 512 [ 1835.569878][T23305] ext4: Unknown parameter 'pcr' [ 1835.646978][ T9810] veth1_vlan: left promiscuous mode [ 1835.862672][ T9810] veth0_vlan: left promiscuous mode [ 1842.373768][T23336] loop3: detected capacity change from 0 to 32768 [ 1843.521556][T23344] read_mapping_page failed! [ 1843.534183][T23344] ERROR: (device loop3): txAbort: [ 1843.534183][T23344] [ 1844.512021][T23352] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1850.343461][T23372] Bluetooth: hci4: command 0x0406 tx timeout [ 1850.349731][T23372] Bluetooth: hci5: command 0x0406 tx timeout [ 1854.381771][T23409] loop4: detected capacity change from 0 to 32768 [ 1856.253269][T23422] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1856.574147][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1857.204161][T23425] read_mapping_page failed! [ 1857.211054][T23425] ERROR: (device loop4): txAbort: [ 1857.211054][T23425] [ 1857.469491][T23064] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1857.514994][T23064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1857.543495][T23064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1857.571306][T23064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1857.583811][T23064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1857.619595][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1858.653138][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1859.653042][T23064] Bluetooth: hci3: command tx timeout [ 1859.693200][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1860.733074][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1861.693002][T23064] Bluetooth: hci3: command tx timeout [ 1861.773079][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1862.767941][ T9810] team0 (unregistering): Port device team_slave_1 removed [ 1862.813065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1862.831023][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.843969][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.779006][T23064] Bluetooth: hci3: command tx timeout [ 1863.853069][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1864.893112][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1865.925404][T23064] Bluetooth: hci3: command tx timeout [ 1865.933077][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1866.409863][ T9810] team0 (unregistering): Port device team_slave_0 removed [ 1866.973246][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1867.036293][T23494] loop5: detected capacity change from 0 to 32768 [ 1867.283557][T23496] read_mapping_page failed! [ 1867.292335][T23496] ERROR: (device loop5): txAbort: [ 1867.292335][T23496] [ 1868.013090][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1869.053115][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1870.093492][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1871.133107][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1872.173067][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1872.819858][T23061] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1873.124804][T23424] lo speed is unknown, defaulting to 1000 [ 1873.213143][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1874.253123][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1875.293372][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1876.333136][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1877.356690][T23424] chnl_net:caif_netlink_parms(): no params data found [ 1877.373194][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1878.413127][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1879.453062][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1880.493099][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1880.938025][ T9810] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.008211][ T9810] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.031846][T23424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.040828][T23424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.048535][T23424] bridge_slave_0: entered allmulticast mode [ 1881.061186][T23424] bridge_slave_0: entered promiscuous mode [ 1881.092863][ T9810] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.109095][T23424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.116510][T23424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.123928][T23424] bridge_slave_1: entered allmulticast mode [ 1881.132173][T23424] bridge_slave_1: entered promiscuous mode [ 1881.158951][ T9810] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.204849][T23424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1881.217195][T23424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1881.262236][T23424] team0: Port device team_slave_0 added [ 1881.271485][T23424] team0: Port device team_slave_1 added [ 1881.323419][T23424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1881.331296][T23424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1881.358605][T23424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1881.371827][T23424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1881.379430][T23424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1881.406189][T23424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1881.498348][ T9810] bridge_slave_1: left allmulticast mode [ 1881.504143][ T9810] bridge_slave_1: left promiscuous mode [ 1881.511287][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.521127][ T9810] bridge_slave_0: left allmulticast mode [ 1881.526927][ T9810] bridge_slave_0: left promiscuous mode [ 1881.532624][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.540151][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1881.807845][ T9810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1881.818960][ T9810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1881.836127][ T9810] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1881.850040][ T9810] bond0 (unregistering): Released all slaves [ 1881.870274][T23424] hsr_slave_0: entered promiscuous mode [ 1881.876800][T23424] hsr_slave_1: entered promiscuous mode [ 1881.883520][T23424] debugfs: 'hsr0' already exists in 'hsr' [ 1881.889256][T23424] Cannot create hsr debugfs directory [ 1882.123778][ T9810] hsr_slave_0: left promiscuous mode [ 1882.129768][ T9810] hsr_slave_1: left promiscuous mode [ 1882.140422][ T9810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1882.150647][ T9810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1882.158739][ T9810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1882.166225][ T9810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1882.196283][ T9810] veth1_macvtap: left promiscuous mode [ 1882.201790][ T9810] veth0_macvtap: left promiscuous mode [ 1882.207608][ T9810] veth1_vlan: left promiscuous mode [ 1882.213715][ T9810] veth0_vlan: left promiscuous mode [ 1882.573141][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1882.590618][ T9810] team0 (unregistering): Port device team_slave_1 removed [ 1882.623267][ T9810] team0 (unregistering): Port device team_slave_0 removed [ 1883.207951][T23424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1883.220784][T23424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1883.235280][T23424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1883.246043][T23424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1883.271826][ T9810] IPVS: stop unused estimator thread 0... [ 1883.360134][T23424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.394094][T23424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.408270][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.415426][ T9585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.431895][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.439049][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.596028][ T9810] bond0 (unregistering): Released all slaves [ 1883.613071][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1883.795867][T23424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1884.084300][T23424] veth0_vlan: entered promiscuous mode [ 1884.098722][T23424] veth1_vlan: entered promiscuous mode [ 1884.129749][T23424] veth0_macvtap: entered promiscuous mode [ 1884.140671][T23424] veth1_macvtap: entered promiscuous mode [ 1884.161977][T23424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.179095][T23424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.194488][ T9810] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.205333][ T9810] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.215704][ T9810] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.225129][ T9810] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.316064][T21666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.324780][T21666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.359322][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.367312][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.653103][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1884.792706][T23609] random: crng reseeded on system resumption [ 1885.693115][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1886.733066][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1887.016669][T23618] loop4: detected capacity change from 0 to 256 [ 1887.773050][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1888.813105][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1889.853059][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1890.573340][ T975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1890.893107][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1891.594476][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 1891.620821][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1891.933090][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1892.973069][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1893.899814][ T975] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1893.929136][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.983461][ T975] usb 5-1: config 0 descriptor?? [ 1894.013093][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1894.318311][ T975] usb 5-1: can't set config #0, error -71 [ 1895.053101][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1895.880757][ T975] usb 5-1: USB disconnect, device number 6 [ 1896.093097][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1897.133069][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1897.266776][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4926'. [ 1897.275957][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4926'. [ 1898.173085][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1899.215303][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1900.253165][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1901.293094][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1902.333239][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1903.373076][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1904.413070][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1905.453081][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1905.612633][T23705] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1906.053276][T14775] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1906.493230][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1906.903395][T14775] usb 4-1: Using ep0 maxpacket: 8 [ 1906.912693][T14775] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1906.997664][T23720] No such timeout policy "syz1" [ 1907.533115][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1907.709957][T14775] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1907.737236][T14775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.764179][T14775] usb 4-1: config 0 descriptor?? [ 1908.046817][T14775] usbhid 4-1:0.0: can't add hid device: -71 [ 1908.052888][T14775] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1908.118011][T14775] usb 4-1: USB disconnect, device number 8 [ 1908.573058][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1909.613106][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1910.653077][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1911.097068][T19557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1911.108514][T19557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1911.117177][T19557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1911.125658][T19557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1911.693078][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1912.092834][T19557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1912.733096][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1912.819559][T23751] lo speed is unknown, defaulting to 1000 [ 1913.773076][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1914.813091][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1914.849308][T19557] Bluetooth: hci6: command tx timeout [ 1915.828618][T23780] /dev/nullb0: Can't open blockdev [ 1915.854106][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1916.893098][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1916.900462][T19557] Bluetooth: hci6: command tx timeout [ 1917.933126][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1918.410113][T23794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1918.973106][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1918.973157][T19557] Bluetooth: hci6: command tx timeout [ 1919.257374][T23751] chnl_net:caif_netlink_parms(): no params data found [ 1920.013753][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1921.053109][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1921.546765][T23807] loop6: detected capacity change from 0 to 32768 [ 1921.676823][T23064] Bluetooth: hci6: command tx timeout [ 1921.816710][T23809] read_mapping_page failed! [ 1921.821479][T23809] ERROR: (device loop6): txAbort: [ 1921.821479][T23809] [ 1922.093060][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1923.133110][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1923.832731][T23751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.179963][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1924.188754][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.202628][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1924.609777][T23751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.641346][T23751] bridge_slave_0: entered allmulticast mode [ 1924.702348][T23751] bridge_slave_0: entered promiscuous mode [ 1924.748698][T23751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.773153][T23751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.982077][T23751] bridge_slave_1: entered allmulticast mode [ 1924.991171][T23751] bridge_slave_1: entered promiscuous mode [ 1925.213109][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1926.253117][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1927.293087][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1927.823723][T23751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.862019][T23751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1928.334626][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1928.661751][T23751] team0: Port device team_slave_0 added [ 1928.823018][T23855] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1929.272584][T23751] team0: Port device team_slave_1 added [ 1929.373398][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1929.495552][T23849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1929.601158][T23751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1929.623918][T23751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.735782][T23751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1929.775246][T23751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1929.802454][T23751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.894297][T23751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1930.413057][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1931.045975][T23751] hsr_slave_0: entered promiscuous mode [ 1931.052854][T23751] hsr_slave_1: entered promiscuous mode [ 1931.060274][T23751] debugfs: 'hsr0' already exists in 'hsr' [ 1931.066091][T23751] Cannot create hsr debugfs directory [ 1931.453084][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1932.493093][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1932.613097][T23880] No such timeout policy "syz1" [ 1933.496506][T23885] loop3: detected capacity change from 0 to 256 [ 1933.533108][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1934.573081][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1935.394149][T23897] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1935.613074][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1936.653069][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1937.693061][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1938.733104][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1939.575201][T23919] loop6: detected capacity change from 0 to 32768 [ 1939.699701][T23919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4986 (23919) [ 1939.773115][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1940.382271][T23919] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1940.392584][T23919] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1940.813560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1941.653366][T23950] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1941.853151][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1942.183035][ T43] IPVS: starting estimator thread 0... [ 1942.211382][T23919] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1942.494562][T23919] BTRFS error (device loop6): open_ctree failed: -12 [ 1942.553333][T23953] IPVS: using max 21 ests per chain, 50400 per kthread [ 1942.893069][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1943.559404][T23963] loop5: detected capacity change from 0 to 256 [ 1943.933278][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1944.417560][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4994'. [ 1944.973310][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1946.013100][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1947.053072][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1948.103262][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1949.133068][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1950.183157][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1951.213173][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1952.253103][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1953.179207][T23751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1953.293241][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1953.869818][T24023] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1954.333242][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1955.373099][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1956.309989][T24036] loop3: detected capacity change from 0 to 32768 [ 1956.324290][T24036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5007 (24036) [ 1956.342269][T24036] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1956.352420][T24036] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1956.413124][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1956.435192][T23751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1956.669968][T24051] loop6: detected capacity change from 0 to 1024 [ 1956.687435][T23751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1958.085443][T23751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1958.101216][ T9805] hfsplus: b-tree write err: -5, ino 4 [ 1958.111493][T24036] BTRFS error (device loop3): open_ctree failed: -4 [ 1958.863596][T12862] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1959.683555][T12862] usb 6-1: Using ep0 maxpacket: 8 [ 1959.714859][T12862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1959.745290][T12862] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1959.771174][T12862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.815062][T12862] usb 6-1: config 0 descriptor?? [ 1961.146543][ T30] audit: type=1800 audit(2000001434.997:803): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5021" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1963.744666][T12862] usbhid 6-1:0.0: can't add hid device: -71 [ 1963.767309][T12862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1964.783124][T12862] usb 6-1: USB disconnect, device number 17 [ 1965.230764][T23751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1966.157825][T24120] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1966.977852][T23751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1967.041316][T14775] IPVS: starting estimator thread 0... [ 1967.133321][T24124] IPVS: using max 20 ests per chain, 48000 per kthread [ 1967.243339][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.250487][ T9585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1967.709355][ T9569] vlan2: left allmulticast mode [ 1967.714320][ T9569] bond0: left allmulticast mode [ 1967.719289][ T9569] bond_slave_0: left allmulticast mode [ 1967.725421][ T9569] bond_slave_1: left allmulticast mode [ 1968.723483][ T9569] macvlan4: left allmulticast mode [ 1968.733229][ T9569] team0: left allmulticast mode [ 1968.738093][ T9569] team_slave_0: left allmulticast mode [ 1969.703475][ T9569] team_slave_1: left allmulticast mode [ 1969.709291][ T9569] vlan2: left promiscuous mode [ 1969.722401][ T9569] bridge0: port 3(vlan2) entered disabled state [ 1972.304735][ T9569] bridge_slave_1: left allmulticast mode [ 1972.389968][ T9569] bridge_slave_1: left promiscuous mode [ 1972.532394][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.824288][ T9569] bridge_slave_0: left allmulticast mode [ 1972.829972][ T9569] bridge_slave_0: left promiscuous mode [ 1974.142394][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.744711][ T9569] bridge4: port 2(veth13) entered disabled state [ 1975.326828][T24171] overlayfs: failed to get inode (-116) [ 1975.336324][T24171] overlayfs: failed to get inode (-116) [ 1976.423724][ T9569] bridge4: port 1(veth11) entered disabled state [ 1977.274263][T19557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1977.300430][T19557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1977.323576][T19557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1977.368439][T19557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1978.318601][T19557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1980.506357][T23064] Bluetooth: hci1: command tx timeout [ 1982.592102][T16161] Bluetooth: hci3: command 0x0406 tx timeout [ 1982.598225][T19557] Bluetooth: hci1: command tx timeout [ 1984.772991][T23064] Bluetooth: hci1: command tx timeout [ 1985.993500][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.002073][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.823189][T23064] Bluetooth: hci1: command tx timeout [ 1995.644596][T23427] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1996.244354][ T9569] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1996.273008][T23427] usb 6-1: Using ep0 maxpacket: 8 [ 1996.279756][T23427] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1996.307587][T23427] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1996.309642][T24295] loop6: detected capacity change from 0 to 16 [ 1996.374876][T24295] erofs (device loop6): mounted with root inode @ nid 36. [ 1996.382208][T23427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.417511][T23427] usb 6-1: config 0 descriptor?? [ 1996.681063][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1996.688778][T23427] usb 6-1: can't set config #0, error -32 [ 1997.530321][T23427] usb 6-1: USB disconnect, device number 18 [ 2001.854351][T24320] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2002.612336][T14799] IPVS: starting estimator thread 0... [ 2004.653149][T24323] IPVS: using max 27 ests per chain, 64800 per kthread [ 2010.623005][ T9569] bond0 (unregistering): left promiscuous mode [ 2010.629213][ T9569] bond_slave_0: left promiscuous mode [ 2010.683649][ T9569] bond_slave_1: left promiscuous mode [ 2010.689242][ T9569] macvlan4: left promiscuous mode [ 2010.776867][T14775] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2010.798005][ T9569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2010.827984][ T9569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.878053][ T9569] bond0 (unregistering): (slave macvlan4): Releasing backup interface [ 2010.944599][ T9569] team0: left promiscuous mode [ 2010.953190][T14775] usb 5-1: Using ep0 maxpacket: 8 [ 2010.958326][ T9569] team_slave_0: left promiscuous mode [ 2011.123532][ T9569] team_slave_1: left promiscuous mode [ 2011.130729][T14775] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2011.150303][ T9569] bond0 (unregistering): Released all slaves [ 2011.973013][T14775] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2011.982105][T14775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.021856][T14775] usb 5-1: config 0 descriptor?? [ 2012.123922][T14799] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2012.127949][ T9569] bond1 (unregistering): Released all slaves [ 2012.587425][T19557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2012.598598][T14799] usb 6-1: Using ep0 maxpacket: 8 [ 2012.685384][T14799] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2012.692665][T14799] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2012.715548][T14799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.806968][T14799] usb 6-1: config 0 descriptor?? [ 2013.560266][T19557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2013.570856][T19557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2013.581095][T19557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2013.589764][T19557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2013.682502][T14775] usbhid 5-1:0.0: can't add hid device: -71 [ 2013.793580][T14775] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2013.812482][T14775] usb 5-1: USB disconnect, device number 7 [ 2013.979936][ T9569] bond2 (unregistering): Released all slaves [ 2014.310568][ T9569] bond3 (unregistering): Released all slaves [ 2014.962173][T24372] loop4: detected capacity change from 0 to 2048 [ 2015.292535][T14799] usbhid 6-1:0.0: can't add hid device: -71 [ 2015.302372][T14799] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2015.313320][T14799] usb 6-1: USB disconnect, device number 19 [ 2015.725535][T23064] Bluetooth: hci0: command tx timeout [ 2015.732587][T24372] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2015.782308][T24378] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2017.773906][T23064] Bluetooth: hci0: command tx timeout [ 2020.401474][T23064] Bluetooth: hci0: command tx timeout [ 2022.401916][ T9569] tipc: Disabling bearer [ 2022.414922][ T9569] tipc: Disabling bearer [ 2022.420762][T24405] loop6: detected capacity change from 0 to 4096 [ 2022.463302][ T9569] tipc: Left network mode [ 2022.579646][T23064] Bluetooth: hci0: command tx timeout [ 2022.647103][T24361] lo speed is unknown, defaulting to 1000 [ 2023.080512][T24399] syzkaller0: entered promiscuous mode [ 2023.087713][T24399] syzkaller0: entered allmulticast mode [ 2023.093382][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c3000: rx timeout, send abort [ 2023.593479][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c3000: abort rx timeout. Force session deactivation [ 2027.659669][T24448] loop6: detected capacity change from 0 to 256 [ 2029.253013][T17561] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2030.364283][T17561] usb 5-1: Using ep0 maxpacket: 8 [ 2030.663132][T24460] IPv6: NLM_F_CREATE should be specified when creating new route [ 2031.148900][T17561] usb 5-1: device descriptor read/all, error -71 [ 2034.764292][T19557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2034.777298][T19557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2034.785924][T19557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2034.794243][T19557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2034.802059][T19557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2036.943295][T19557] Bluetooth: hci6: command tx timeout [ 2038.979538][T19557] Bluetooth: hci6: command tx timeout [ 2039.154735][T24500] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5117'. [ 2039.914382][T23064] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2039.926458][T23064] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2039.934574][T23064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2039.942737][T23064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2039.952630][T23064] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2041.053158][T19557] Bluetooth: hci6: command tx timeout [ 2041.536844][T24521] overlayfs: overlapping lowerdir path [ 2041.601097][T24521] overlayfs: failed to verify upper (47/file0, ino=277, err=-116) [ 2041.609130][T24521] overlayfs: failed to verify index dir 'upper' xattr [ 2041.615993][T24521] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 2042.024978][T19557] Bluetooth: hci7: command tx timeout [ 2042.480973][T24523] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5123'. [ 2042.508639][T24523] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2043.144114][T23064] Bluetooth: hci6: command tx timeout [ 2044.931632][T23064] Bluetooth: hci7: command tx timeout [ 2045.103106][T14794] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2045.275740][T14794] usb 7-1: Using ep0 maxpacket: 8 [ 2045.331309][T14794] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2045.340495][T14794] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2045.400925][T14794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.605879][T14794] usb 7-1: config 0 descriptor?? [ 2046.717122][T24172] lo speed is unknown, defaulting to 1000 [ 2046.973393][T14794] usbhid 7-1:0.0: can't add hid device: -71 [ 2047.016368][T14794] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2047.059758][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.072997][T23064] Bluetooth: hci7: command tx timeout [ 2047.078603][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.134220][T14794] usb 7-1: USB disconnect, device number 5 [ 2049.133004][T23064] Bluetooth: hci7: command tx timeout [ 2049.360404][T24510] lo speed is unknown, defaulting to 1000 [ 2049.513109][ T30] audit: type=1800 audit(2000001523.877:804): pid=24561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5132" name="SYSV798dd824" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2050.297722][T24481] lo speed is unknown, defaulting to 1000 [ 2051.578814][T24558] overlayfs: failed to clone upperpath [ 2053.165498][T14799] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2053.393495][ T9569] batadv0: left promiscuous mode [ 2053.415773][ T9569] hsr_slave_0: left promiscuous mode [ 2053.430757][ T9569] hsr_slave_1: left promiscuous mode [ 2053.447484][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2053.469481][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2055.231824][T14799] usb 7-1: Using ep0 maxpacket: 8 [ 2055.493462][T14799] usb 7-1: device descriptor read/all, error -71 [ 2061.790837][T24624] loop4: detected capacity change from 0 to 1024 [ 2062.692022][T24632] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2069.476067][ T9569] team0 (unregistering): Port device team_slave_1 removed [ 2070.423442][ T9569] team0 (unregistering): Port device team_slave_0 removed [ 2073.204572][T19557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2073.214515][T19557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2073.237524][T19557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2073.246172][T19557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2073.257729][T19557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2075.400998][T19557] Bluetooth: hci4: command tx timeout [ 2075.883626][T24704] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5170'. [ 2077.473733][T19557] Bluetooth: hci4: command tx timeout [ 2079.972722][T19557] Bluetooth: hci4: command tx timeout [ 2080.056056][T23600] lo speed is unknown, defaulting to 1000 [ 2080.061824][T23600] infiniband syz2: ib_query_port failed (-19) [ 2080.973106][T24394] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2081.643074][T24394] usb 7-1: Using ep0 maxpacket: 8 [ 2082.243001][T19557] Bluetooth: hci4: command tx timeout [ 2082.560955][T24394] usb 7-1: device descriptor read/all, error -71 [ 2084.437138][T24762] comedi comedi0: Minor 3 could not be opened [ 2084.757794][T24481] chnl_net:caif_netlink_parms(): no params data found [ 2085.837782][T24772] loop6: detected capacity change from 0 to 4096 [ 2089.119126][T24772] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 2089.154797][T24510] chnl_net:caif_netlink_parms(): no params data found [ 2089.183595][T24772] ntfs3(loop6): Failed to read $AttrDef (-4). [ 2089.677455][ T9569] IPVS: stop unused estimator thread 0... [ 2089.925342][T24683] chnl_net:caif_netlink_parms(): no params data found [ 2090.665304][T23064] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2090.680286][T23064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2090.689867][T23064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2090.700088][T23064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2090.713604][T23064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2092.363511][T23600] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2092.426666][T24510] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.449330][T24510] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.491576][T24510] bridge_slave_0: entered allmulticast mode [ 2092.544897][T24510] bridge_slave_0: entered promiscuous mode [ 2092.581041][T24510] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.610308][T24510] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.628072][T24510] bridge_slave_1: entered allmulticast mode [ 2092.651453][T24510] bridge_slave_1: entered promiscuous mode [ 2092.826933][T24807] loop4: detected capacity change from 0 to 4096 [ 2092.849687][T19557] Bluetooth: hci0: command tx timeout [ 2093.229394][T24807] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 2093.457424][T24807] ntfs3(loop4): Failed to load $Extend (-22). [ 2093.463840][T24807] ntfs3(loop4): Failed to initialize $Extend. [ 2093.702999][T23600] usb 7-1: Using ep0 maxpacket: 8 [ 2093.724708][T23600] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2093.731346][T23600] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2093.746895][T24683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.754766][T23600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.776303][T23600] usb 7-1: config 0 descriptor?? [ 2093.781188][T24683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.811471][T24683] bridge_slave_0: entered allmulticast mode [ 2093.840831][T24683] bridge_slave_0: entered promiscuous mode [ 2093.864667][T24683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.875919][T24683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.884621][T24683] bridge_slave_1: entered allmulticast mode [ 2093.894210][T24683] bridge_slave_1: entered promiscuous mode [ 2093.982032][ T9569] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.054794][T24510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2094.109244][T24510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2094.153987][ T9569] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.181109][T24683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2094.266965][T24683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2094.298751][T24510] team0: Port device team_slave_0 added [ 2094.320593][ T9569] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.774626][T24510] team0: Port device team_slave_1 added [ 2094.821224][ T9569] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.903239][T19557] Bluetooth: hci0: command tx timeout [ 2094.916244][T24683] team0: Port device team_slave_0 added [ 2095.113169][T23600] usbhid 7-1:0.0: can't add hid device: -71 [ 2095.173308][T23600] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2095.264060][T23600] usb 7-1: USB disconnect, device number 10 [ 2095.419651][T24816] loop6: detected capacity change from 0 to 256 [ 2095.449924][T24683] team0: Port device team_slave_1 added [ 2095.599498][T24816] exFAT-fs (loop6): invalid boot record signature [ 2095.650245][T24816] exFAT-fs (loop6): failed to read boot sector [ 2095.672980][T24816] exFAT-fs (loop6): failed to recognize exfat type [ 2097.455487][T19557] Bluetooth: hci0: command tx timeout [ 2098.995445][T24683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.002426][T24683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.086349][T24683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.105681][T23064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2099.117940][T23064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2099.126402][T23064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2099.138937][T23064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2099.147875][T23064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2099.283297][T24837] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5202'. [ 2099.311852][T24683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.370128][T24683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.419367][T24683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2099.543087][T19557] Bluetooth: hci0: command tx timeout [ 2100.860777][T24683] hsr_slave_0: entered promiscuous mode [ 2102.605706][T19557] Bluetooth: hci1: command tx timeout [ 2102.694174][T24683] hsr_slave_1: entered promiscuous mode [ 2102.726978][T24683] debugfs: 'hsr0' already exists in 'hsr' [ 2102.732728][T24683] Cannot create hsr debugfs directory [ 2104.526462][ T9569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.623305][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2104.631881][T24789] chnl_net:caif_netlink_parms(): no params data found [ 2104.653246][T19557] Bluetooth: hci1: command tx timeout [ 2104.760296][ T9569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.803017][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 2104.815208][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2104.821840][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2104.853361][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.886389][ T9] usb 7-1: config 0 descriptor?? [ 2105.402767][T24868] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2105.409967][T24868] overlayfs: failed to set xattr on upper [ 2105.416463][T24868] overlayfs: ...falling back to redirect_dir=nofollow. [ 2105.423760][T24868] overlayfs: ...falling back to index=off. [ 2105.429684][T24868] overlayfs: ...falling back to uuid=null. [ 2105.445924][T24868] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2105.630294][ T9569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.856181][ T9569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.959026][T24789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.983720][T24789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.998792][T24789] bridge_slave_0: entered allmulticast mode [ 2106.007923][T24789] bridge_slave_0: entered promiscuous mode [ 2106.037465][T24789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.046392][T24789] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.054595][T24789] bridge_slave_1: entered allmulticast mode [ 2106.063800][T24789] bridge_slave_1: entered promiscuous mode [ 2106.073578][T14799] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2106.250204][T14799] usb 5-1: Using ep0 maxpacket: 8 [ 2106.297542][T14799] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2106.368837][T14799] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2106.386780][T24789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.399788][T14799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.561566][T14799] usb 5-1: config 0 descriptor?? [ 2106.885038][T19557] Bluetooth: hci1: command tx timeout [ 2106.948038][T14799] usbhid 5-1:0.0: can't add hid device: -71 [ 2106.977295][T14799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2106.989644][T24789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2107.021727][T14799] usb 5-1: USB disconnect, device number 10 [ 2107.114463][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 2107.120486][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2107.133986][ T9] usb 7-1: USB disconnect, device number 11 [ 2108.613743][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.893042][T19557] Bluetooth: hci1: command tx timeout [ 2109.012554][T24832] chnl_net:caif_netlink_parms(): no params data found [ 2109.051751][T24789] team0: Port device team_slave_0 added [ 2109.074828][T24896] loop6: detected capacity change from 0 to 1024 [ 2109.089347][T24789] team0: Port device team_slave_1 added [ 2109.104278][T24896] EXT4-fs: Ignoring removed i_version option [ 2109.124402][T24896] EXT4-fs: inline encryption not supported [ 2109.155338][T24896] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2109.451428][T24896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2112.409038][T23424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2113.303556][T24789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2113.310529][T24789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.353277][T24789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2113.366314][T24789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2113.375074][T24789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.401176][T24789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2114.687319][T24832] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.694852][T24832] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.711414][T24832] bridge_slave_0: entered allmulticast mode [ 2114.742856][T24832] bridge_slave_0: entered promiscuous mode [ 2114.867190][T24832] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.900121][T24832] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.911053][T24832] bridge_slave_1: entered allmulticast mode [ 2114.919544][T24832] bridge_slave_1: entered promiscuous mode [ 2115.026634][T24789] hsr_slave_0: entered promiscuous mode [ 2115.033876][T24789] hsr_slave_1: entered promiscuous mode [ 2115.040348][T24789] debugfs: 'hsr0' already exists in 'hsr' [ 2115.046581][T24789] Cannot create hsr debugfs directory [ 2115.106989][T24832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2115.128892][T24832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2115.253595][T24832] team0: Port device team_slave_0 added [ 2116.534371][T24832] team0: Port device team_slave_1 added [ 2118.864477][T24938] loop4: detected capacity change from 0 to 64 [ 2119.194437][T24683] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2119.546657][T24832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2119.554633][T24832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2120.182340][T24832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2120.436169][T24683] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2120.596773][T24832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2120.604629][T24832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2120.823122][T24832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2121.855030][T24683] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2121.879883][T24683] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2124.865374][T24832] hsr_slave_0: entered promiscuous mode [ 2124.876899][T24832] hsr_slave_1: entered promiscuous mode [ 2124.890108][T24832] debugfs: 'hsr0' already exists in 'hsr' [ 2124.902886][T24832] Cannot create hsr debugfs directory [ 2126.521222][ T9569] bridge_slave_1: left allmulticast mode [ 2126.534772][ T9569] bridge_slave_1: left promiscuous mode [ 2126.540538][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2126.620627][ T9569] bridge_slave_0: left allmulticast mode [ 2126.639594][ T9569] bridge_slave_0: left promiscuous mode [ 2126.649895][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 2126.681891][ T9569] bridge_slave_1: left allmulticast mode [ 2126.934319][ T9569] bridge_slave_1: left promiscuous mode [ 2126.947523][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2126.975928][ T9569] bridge_slave_0: left allmulticast mode [ 2126.983716][ T9569] bridge_slave_0: left promiscuous mode [ 2127.008761][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.232742][ T9569] bridge1: port 1(veth3) entered disabled state [ 2128.275321][ T9569] bridge_slave_1: left allmulticast mode [ 2128.293148][ T9569] bridge_slave_1: left promiscuous mode [ 2128.298906][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.503506][ T9569] bridge_slave_0: left allmulticast mode [ 2128.509172][ T9569] bridge_slave_0: left promiscuous mode [ 2128.516045][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.543968][T24999] loop6: detected capacity change from 0 to 128 [ 2130.573902][T14799] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2130.586537][T24999] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2130.613627][T24999] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2130.733250][T14799] usb 5-1: Using ep0 maxpacket: 8 [ 2131.171412][T14799] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2131.189804][T14799] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2131.209075][T14799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.262613][T14799] usb 5-1: config 0 descriptor?? [ 2131.408332][T23424] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2131.496887][T14799] usbhid 5-1:0.0: can't add hid device: -71 [ 2131.504573][T14799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2131.541159][T14799] usb 5-1: USB disconnect, device number 11 [ 2131.707269][T23064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2131.741490][T23064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2131.749609][T23064] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2131.758850][T23064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2131.769138][T23064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2131.832730][ T9569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2131.844988][ T9569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2131.855268][ T9569] bond0 (unregistering): Released all slaves [ 2134.095294][T25015] Process accounting resumed [ 2134.103030][T19557] Bluetooth: hci6: command tx timeout [ 2134.685052][T25021] loop4: detected capacity change from 0 to 40427 [ 2134.724045][T25021] F2FS-fs (loop4): invalid crc value [ 2134.802170][T25021] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 2134.812050][T25021] F2FS-fs (loop4): Start checkpoint disabled! [ 2134.860227][T25021] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 2134.868215][T25021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2135.622307][ T9585] kworker/u8:50: attempt to access beyond end of device [ 2135.622307][ T9585] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 2135.696288][ T9585] kworker/u8:50: attempt to access beyond end of device [ 2135.696288][ T9585] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 2135.795644][ T9585] CPU: 1 UID: 0 PID: 9585 Comm: kworker/u8:50 Not tainted syzkaller #0 PREEMPT(full) [ 2135.795693][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2135.795719][ T9585] Workqueue: writeback wb_workfn (flush-7:4) [ 2135.795779][ T9585] Call Trace: [ 2135.795790][ T9585] [ 2135.795807][ T9585] dump_stack_lvl+0x16c/0x1f0 [ 2135.795846][ T9585] f2fs_handle_critical_error+0x624/0x9f0 [ 2135.795880][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.795914][ T9585] ? f2fs_build_fault_attr+0x53/0x1f0 [ 2135.795969][ T9585] f2fs_write_end_io+0x958/0xcf0 [ 2135.796007][ T9585] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 2135.796046][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796090][ T9585] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 2135.796123][ T9585] bio_endio+0x713/0x860 [ 2135.796166][ T9585] submit_bio_noacct+0x306/0x1f60 [ 2135.796206][ T9585] __submit_merged_bio+0x33c/0x770 [ 2135.796246][ T9585] __submit_merged_write_cond+0x319/0x3f0 [ 2135.796290][ T9585] f2fs_write_cache_pages+0x2067/0x2570 [ 2135.796353][ T9585] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 2135.796397][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796435][ T9585] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 2135.796483][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796516][ T9585] ? __bpf_trace_contention_end+0xc9/0x110 [ 2135.796564][ T9585] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 2135.796613][ T9585] ? do_raw_spin_unlock+0x172/0x230 [ 2135.796662][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796749][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796782][ T9585] ? finish_task_switch.isra.0+0x221/0xc10 [ 2135.796823][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796858][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796892][ T9585] ? f2fs_remove_dirty_inode+0x125/0x4f0 [ 2135.796934][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.796975][ T9585] f2fs_write_data_pages+0x4ad/0xd90 [ 2135.797021][ T9585] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 2135.797073][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.797107][ T9585] ? __lock_acquire+0xb8a/0x1c90 [ 2135.797153][ T9585] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 2135.797196][ T9585] do_writepages+0x27a/0x600 [ 2135.797231][ T9585] ? __pfx_do_writepages+0x10/0x10 [ 2135.797258][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.797291][ T9585] ? reacquire_held_locks+0xcd/0x1f0 [ 2135.797337][ T9585] ? writeback_sb_inodes+0x3b0/0xfa0 [ 2135.797378][ T9585] __writeback_single_inode+0x160/0xfb0 [ 2135.797419][ T9585] ? __pfx___writeback_single_inode+0x10/0x10 [ 2135.797454][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.797487][ T9585] ? do_raw_spin_unlock+0x172/0x230 [ 2135.797520][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.797560][ T9585] writeback_sb_inodes+0x60d/0xfa0 [ 2135.797614][ T9585] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 2135.797651][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.797684][ T9585] ? mark_held_locks+0x49/0x80 [ 2135.797729][ T9585] ? irqentry_exit+0x3b/0x90 [ 2135.797821][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.797855][ T9585] ? rcu_is_watching+0x12/0xc0 [ 2135.797891][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.797925][ T9585] ? queue_io+0x3f6/0x520 [ 2135.797961][ T9585] wb_writeback+0x419/0xb70 [ 2135.798006][ T9585] ? __pfx_wb_writeback+0x10/0x10 [ 2135.798040][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798086][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798121][ T9585] ? mark_held_locks+0x49/0x80 [ 2135.798192][ T9585] wb_workfn+0x14d/0xbe0 [ 2135.798240][ T9585] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2135.798279][ T9585] ? __pfx_wb_workfn+0x10/0x10 [ 2135.798320][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798357][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798395][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798429][ T9585] ? rcu_is_watching+0x12/0xc0 [ 2135.798472][ T9585] process_one_work+0x9cf/0x1b70 [ 2135.798516][ T9585] ? __pfx_flush_memcg_stats_dwork+0x10/0x10 [ 2135.798551][ T9585] ? __pfx_process_one_work+0x10/0x10 [ 2135.798583][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798626][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798660][ T9585] ? assign_work+0x1a0/0x250 [ 2135.798693][ T9585] worker_thread+0x6c8/0xf10 [ 2135.798743][ T9585] ? __pfx_worker_thread+0x10/0x10 [ 2135.798775][ T9585] kthread+0x3c5/0x780 [ 2135.798811][ T9585] ? __pfx_kthread+0x10/0x10 [ 2135.798851][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2135.798896][ T9585] ? rcu_is_watching+0x12/0xc0 [ 2135.798934][ T9585] ? __pfx_kthread+0x10/0x10 [ 2135.798964][ T9585] ret_from_fork+0x675/0x7d0 [ 2135.798989][ T9585] ? __pfx_kthread+0x10/0x10 [ 2135.799019][ T9585] ret_from_fork_asm+0x1a/0x30 [ 2135.799081][ T9585] [ 2135.801952][ T9569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2135.835684][ T9585] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2136.283118][T23064] Bluetooth: hci6: command tx timeout [ 2136.344827][ T9569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2136.369043][ T9569] bond0 (unregistering): Released all slaves [ 2137.356236][ T9569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2137.435283][ T9569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2137.493913][ T9569] bond0 (unregistering): Released all slaves [ 2138.411228][T23064] Bluetooth: hci6: command tx timeout [ 2138.550615][ T9569] tipc: Left network mode [ 2139.627319][T24394] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2140.186411][T24394] usb 7-1: Using ep0 maxpacket: 8 [ 2140.210718][T24394] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2140.235303][T24394] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2140.254926][T24394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.283931][T24394] usb 7-1: config 0 descriptor?? [ 2141.039558][T23064] Bluetooth: hci6: command tx timeout [ 2143.138101][T24394] usbhid 7-1:0.0: can't add hid device: -71 [ 2143.183820][T24394] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2143.213398][T24394] usb 7-1: USB disconnect, device number 12 [ 2143.741496][T24789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2144.534962][T24789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2144.566853][T24789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2144.624566][T24789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2144.758042][ T9569] hsr_slave_0: left promiscuous mode [ 2144.770915][ T9569] hsr_slave_1: left promiscuous mode [ 2144.785332][ T9569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2144.792718][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2144.807439][ T9569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2144.873449][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2144.927428][ T9569] hsr_slave_0: left promiscuous mode [ 2144.947805][ T9569] hsr_slave_1: left promiscuous mode [ 2144.966564][ T9569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2144.993984][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2145.018538][ T9569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2145.045177][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2145.103173][T14799] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2145.126564][ T9569] hsr_slave_0: left promiscuous mode [ 2145.180576][ T9569] hsr_slave_1: left promiscuous mode [ 2145.317086][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2145.430781][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2145.936202][ T9569] veth1_macvtap: left promiscuous mode [ 2145.953529][ T9569] veth0_macvtap: left promiscuous mode [ 2145.963388][ T9569] veth1_vlan: left promiscuous mode [ 2145.973345][ T9569] veth0_vlan: left promiscuous mode [ 2145.992010][ T9569] veth1_macvtap: left promiscuous mode [ 2145.999411][ T9569] veth0_macvtap: left promiscuous mode [ 2146.013247][ T9569] veth1_vlan: left promiscuous mode [ 2146.023339][ T9569] veth0_vlan: left promiscuous mode [ 2146.203062][T14799] usb 7-1: Using ep0 maxpacket: 8 [ 2146.210870][T14799] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2146.223943][T14799] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2146.259822][T14799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.280773][T14799] usb 7-1: config 0 descriptor?? [ 2148.466258][T14799] usbhid 7-1:0.0: can't add hid device: -71 [ 2148.473166][T14799] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2149.464167][T14799] usb 7-1: USB disconnect, device number 13 [ 2150.067613][T25081] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2156.005580][T19557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2156.017933][T19557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2156.026872][T19557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2156.035106][T19557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2156.044329][T19557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2157.914587][ T9569] team0 (unregistering): Port device team_slave_1 removed [ 2158.013153][ T9569] team0 (unregistering): Port device team_slave_0 removed [ 2158.093545][T23064] Bluetooth: hci4: command tx timeout [ 2158.203022][T24394] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2158.365189][T24394] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.385309][T24394] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2158.413234][T24394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.438357][T24394] usb 7-1: config 0 descriptor?? [ 2158.458298][T24394] pwc: Askey VC010 type 2 USB webcam detected. [ 2158.865193][T24394] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2158.883377][T24394] pwc: recv_control_msg error -32 req 02 val 2700 [ 2158.923844][T24394] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2158.931965][T24394] pwc: recv_control_msg error -32 req 04 val 1000 [ 2158.954401][T24394] pwc: recv_control_msg error -32 req 04 val 1300 [ 2158.985469][T24394] pwc: recv_control_msg error -32 req 04 val 1400 [ 2159.004078][T24394] pwc: recv_control_msg error -32 req 02 val 2000 [ 2159.016276][T19557] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2159.028539][T24394] pwc: recv_control_msg error -32 req 02 val 2100 [ 2159.035504][T19557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2159.044570][T19557] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2159.056260][T24394] pwc: recv_control_msg error -32 req 04 val 1500 [ 2159.062817][T19557] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2159.073319][T19557] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2159.084236][T24394] pwc: recv_control_msg error -32 req 02 val 2500 [ 2159.092136][T24394] pwc: recv_control_msg error -32 req 02 val 2400 [ 2159.112641][T24394] pwc: recv_control_msg error -32 req 02 val 2600 [ 2159.141589][T24394] pwc: recv_control_msg error -32 req 02 val 2900 [ 2159.159988][T24394] pwc: recv_control_msg error -32 req 02 val 2800 [ 2159.174636][T24394] pwc: recv_control_msg error -32 req 04 val 1100 [ 2159.204656][T24394] pwc: Registered as video103. [ 2159.221984][T24394] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 2159.473984][T24394] usb 7-1: USB disconnect, device number 14 [ 2159.932729][ T9569] team0 (unregistering): Port device team_slave_1 removed [ 2159.970751][ T9569] team0 (unregistering): Port device team_slave_0 removed [ 2160.174204][T19557] Bluetooth: hci4: command tx timeout [ 2161.133175][T19557] Bluetooth: hci7: command tx timeout [ 2161.861894][ T9569] team0 (unregistering): Port device team_slave_1 removed [ 2161.963928][ T9569] team0 (unregistering): Port device team_slave_0 removed [ 2162.253553][T23064] Bluetooth: hci4: command tx timeout [ 2162.858810][T24789] kthread_run failed with err -4 [ 2163.293659][T23064] Bluetooth: hci7: command tx timeout [ 2163.460213][T25007] chnl_net:caif_netlink_parms(): no params data found [ 2164.433088][T23064] Bluetooth: hci4: command tx timeout [ 2164.819834][T25131] loop6: detected capacity change from 0 to 512 [ 2164.850591][T25131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2165.383164][T23064] Bluetooth: hci7: command tx timeout [ 2166.216841][T25131] EXT4-fs error (device loop6): ext4_iget_extra_inode:5074: inode #15: comm syz.6.5267: corrupted in-inode xattr: e_value size too large [ 2166.927045][T25131] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5267: couldn't read orphan inode 15 (err -117) [ 2167.023777][T25131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2167.702691][T23064] Bluetooth: hci7: command tx timeout [ 2169.561198][T23424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2170.003697][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2171.752232][T25007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.625030][T25007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.632342][T25007] bridge_slave_0: entered allmulticast mode [ 2172.705468][T25007] bridge_slave_0: entered promiscuous mode [ 2173.424260][T25007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2173.438608][T25007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2173.501028][T25007] bridge_slave_1: entered allmulticast mode [ 2173.540562][T25007] bridge_slave_1: entered promiscuous mode [ 2173.949428][T25183] random: crng reseeded on system resumption [ 2174.072272][T25183] Restarting kernel threads ... [ 2174.078785][T25183] Done restarting kernel threads. [ 2177.146495][T25007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2179.509746][T25208] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2180.616184][T25007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2182.447844][T25007] team0: Port device team_slave_0 added [ 2183.480688][T25007] team0: Port device team_slave_1 added [ 2186.334049][T24394] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2187.257259][T25007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2187.274926][T25007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2187.413262][T25007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2187.583026][T24394] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2187.691140][T25007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2187.716654][T25007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2187.773148][T25007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2187.804580][T24394] usb 5-1: Using ep0 maxpacket: 8 [ 2187.836317][T24394] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2187.851915][T24394] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2187.882503][T24394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.912628][T24394] usb 5-1: config 0 descriptor?? [ 2187.945110][T25241] loop6: detected capacity change from 0 to 8 [ 2188.421472][T25243] SQUASHFS error: Unable to read directory block [2c0:35] [ 2188.581621][T25007] hsr_slave_0: entered promiscuous mode [ 2188.596076][T25007] hsr_slave_1: entered promiscuous mode [ 2188.610275][T25111] chnl_net:caif_netlink_parms(): no params data found [ 2188.784493][T25103] chnl_net:caif_netlink_parms(): no params data found [ 2188.875647][ T9569] IPVS: stop unused estimator thread 0... [ 2188.907500][ T9569] IPVS: stop unused estimator thread 0... [ 2189.244503][T25103] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.262298][T25103] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.277800][T25103] bridge_slave_0: entered allmulticast mode [ 2189.295928][T25103] bridge_slave_0: entered promiscuous mode [ 2189.835872][T25111] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.882032][T24394] usbhid 5-1:0.0: can't add hid device: -71 [ 2189.893479][T24394] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2189.952159][T25111] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.964069][T24394] usb 5-1: USB disconnect, device number 13 [ 2189.981828][T25111] bridge_slave_0: entered allmulticast mode [ 2190.011709][T25111] bridge_slave_0: entered promiscuous mode [ 2190.067167][T25103] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.076641][T25103] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.102391][T25103] bridge_slave_1: entered allmulticast mode [ 2190.356847][T25103] bridge_slave_1: entered promiscuous mode [ 2191.700192][T25265] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2191.856589][T25111] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.253567][T25111] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.260889][T25111] bridge_slave_1: entered allmulticast mode [ 2192.275166][T25111] bridge_slave_1: entered promiscuous mode [ 2192.955576][T25103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2193.913160][T25111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2193.961108][T19557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2194.327905][T19557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2194.948023][T25103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2194.955862][T19557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2194.958696][T25283] random: crng reseeded on system resumption [ 2194.976047][T19557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2194.985540][T19557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2196.198732][T25111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2196.222030][T25285] loop4: detected capacity change from 0 to 8 [ 2197.342162][T25291] SQUASHFS error: Unable to read directory block [2c0:35] [ 2198.018302][T19557] Bluetooth: hci0: command tx timeout [ 2198.222001][T25103] team0: Port device team_slave_0 added [ 2198.293236][T25111] team0: Port device team_slave_0 added [ 2198.303602][T25103] team0: Port device team_slave_1 added [ 2198.318056][T25111] team0: Port device team_slave_1 added [ 2198.541016][T25103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2198.548428][T25103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2198.575851][T25103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2199.071977][T25111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2199.477985][T25111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2199.546248][T25111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2199.624213][T25111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2199.636177][T25111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2199.673911][T25111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2199.861167][T25103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2199.868412][T25103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.113917][T19557] Bluetooth: hci0: command tx timeout [ 2200.124600][T25103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2200.453800][T24394] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2200.633578][T24394] usb 5-1: Using ep0 maxpacket: 8 [ 2200.742048][T24394] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2200.753942][T24394] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2200.774720][T24394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.795721][T24394] usb 5-1: config 0 descriptor?? [ 2200.978390][T25111] hsr_slave_0: entered promiscuous mode [ 2200.985655][T25111] hsr_slave_1: entered promiscuous mode [ 2200.992466][T25111] debugfs: 'hsr0' already exists in 'hsr' [ 2200.999084][T25111] Cannot create hsr debugfs directory [ 2201.017334][T24394] usbhid 5-1:0.0: can't add hid device: -71 [ 2201.032877][T24394] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2201.079860][T24394] usb 5-1: USB disconnect, device number 14 [ 2201.095032][T25103] hsr_slave_0: entered promiscuous mode [ 2201.101855][T25103] hsr_slave_1: entered promiscuous mode [ 2201.111453][T25103] debugfs: 'hsr0' already exists in 'hsr' [ 2201.121752][T25103] Cannot create hsr debugfs directory [ 2201.753545][T25278] chnl_net:caif_netlink_parms(): no params data found [ 2201.922760][T25278] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.930213][T25278] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.937800][T25278] bridge_slave_0: entered allmulticast mode [ 2201.947049][T25278] bridge_slave_0: entered promiscuous mode [ 2201.956729][T25111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2201.968271][T25111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2201.979437][T25111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2201.989764][T25278] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.997142][T25278] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.004776][T25278] bridge_slave_1: entered allmulticast mode [ 2202.012311][T25278] bridge_slave_1: entered promiscuous mode [ 2202.057631][T25111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2202.128945][T25278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2202.141493][T25278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2202.174065][T19557] Bluetooth: hci0: command tx timeout [ 2202.226482][T25278] team0: Port device team_slave_0 added [ 2202.275384][T25278] team0: Port device team_slave_1 added [ 2202.306360][ T9585] bridge_slave_1: left allmulticast mode [ 2202.312039][ T9585] bridge_slave_1: left promiscuous mode [ 2202.319884][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.329184][ T9585] bridge_slave_0: left allmulticast mode [ 2202.335119][ T9585] bridge_slave_0: left promiscuous mode [ 2202.340843][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.352471][ T9585] bridge_slave_1: left allmulticast mode [ 2202.358886][ T9585] bridge_slave_1: left promiscuous mode [ 2202.364863][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.374820][ T9585] bridge_slave_0: left allmulticast mode [ 2202.380451][ T9585] bridge_slave_0: left promiscuous mode [ 2202.386618][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.397677][ T9585] bridge_slave_1: left allmulticast mode [ 2202.404134][ T9585] bridge_slave_1: left promiscuous mode [ 2202.409962][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.420084][ T9585] bridge_slave_0: left allmulticast mode [ 2202.425855][ T9585] bridge_slave_0: left promiscuous mode [ 2202.431541][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.442717][ T9585] bridge_slave_1: left allmulticast mode [ 2202.448479][ T9585] bridge_slave_1: left promiscuous mode [ 2202.454504][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.464323][ T9585] bridge_slave_0: left allmulticast mode [ 2202.469954][ T9585] bridge_slave_0: left promiscuous mode [ 2202.477056][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.611687][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.622744][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.633398][ T9585] bond0 (unregistering): Released all slaves [ 2202.761566][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.773514][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.784277][ T9585] bond0 (unregistering): Released all slaves [ 2202.908945][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.919914][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.930340][ T9585] bond0 (unregistering): Released all slaves [ 2203.018971][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2203.030342][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2203.040627][ T9585] bond0 (unregistering): Released all slaves [ 2203.151533][ T9585] bond0 (unregistering): Released all slaves [ 2203.239036][T25278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2203.247860][T25278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2203.276736][T25278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2203.292414][T25278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2203.300605][T25278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2203.329733][T25278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2203.512511][T25278] hsr_slave_0: entered promiscuous mode [ 2203.519131][T25278] hsr_slave_1: entered promiscuous mode [ 2203.525620][T25278] debugfs: 'hsr0' already exists in 'hsr' [ 2203.531334][T25278] Cannot create hsr debugfs directory [ 2203.548375][ T9585] hsr_slave_0: left promiscuous mode [ 2203.555324][ T9585] hsr_slave_1: left promiscuous mode [ 2203.561838][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.572018][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.585932][ T9585] hsr_slave_0: left promiscuous mode [ 2203.591954][ T9585] hsr_slave_1: left promiscuous mode [ 2203.598479][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.606744][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.618987][ T9585] hsr_slave_0: left promiscuous mode [ 2203.625297][ T9585] hsr_slave_1: left promiscuous mode [ 2203.631268][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.641681][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.821579][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 2203.850590][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 2204.179370][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 2204.210014][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 2204.256184][T19557] Bluetooth: hci0: command tx timeout [ 2204.532644][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 2204.573404][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 2204.784301][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 2204.819534][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 2205.269947][T25103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2205.288474][T25103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2205.312711][T25103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2205.333275][T25103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2205.404441][T25111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2205.508311][T25111] 8021q: adding VLAN 0 to HW filter on device team0 [ 2205.578148][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.585343][ T9805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2205.605666][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.612786][ T9805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2205.750717][T25103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2205.807052][T25103] 8021q: adding VLAN 0 to HW filter on device team0 [ 2205.845770][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.852978][ T9805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2205.907493][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.914711][ T9805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2206.180735][T25278] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2206.210930][T25278] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2206.242506][T25278] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2206.270336][T25111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2206.284311][T25278] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2206.467929][T25111] veth0_vlan: entered promiscuous mode [ 2206.509800][T25111] veth1_vlan: entered promiscuous mode [ 2206.572258][T25103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2206.584515][T25111] veth0_macvtap: entered promiscuous mode [ 2206.605580][T25111] veth1_macvtap: entered promiscuous mode [ 2206.658881][T25111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2206.690508][T25278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2206.717170][T25111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2206.749660][ T9810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.776552][T25278] 8021q: adding VLAN 0 to HW filter on device team0 [ 2206.785527][T25103] veth0_vlan: entered promiscuous mode [ 2206.800952][ T9810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.809944][ T9810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.825253][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 2206.832356][ T9569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2206.842178][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 2206.849337][ T9569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2206.868912][T25103] veth1_vlan: entered promiscuous mode [ 2206.877297][T24326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.888102][ T9585] bridge_slave_1: left allmulticast mode [ 2206.894054][ T9585] bridge_slave_1: left promiscuous mode [ 2206.899775][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.910119][ T9585] bridge_slave_0: left allmulticast mode [ 2206.916231][ T9585] bridge_slave_0: left promiscuous mode [ 2206.921932][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.028666][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2207.041698][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2207.051889][ T9585] bond0 (unregistering): Released all slaves [ 2207.142610][T25103] veth0_macvtap: entered promiscuous mode [ 2207.196069][ T9585] hsr_slave_0: left promiscuous mode [ 2207.202019][ T9585] hsr_slave_1: left promiscuous mode [ 2207.210557][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2207.219074][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2207.363676][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 2207.398056][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 2207.579328][T25103] veth1_macvtap: entered promiscuous mode [ 2207.631521][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2207.650793][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2207.697107][T25103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2207.748282][T25103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2207.766034][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2207.776823][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2207.792718][ T9805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.816807][ T9805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.852723][T24326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.862704][T24326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.668083][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.699983][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.361925][ T9569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.387861][T25278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2209.398090][ T9569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2212.664518][T25278] veth0_vlan: entered promiscuous mode [ 2212.679419][T25278] veth1_vlan: entered promiscuous mode [ 2212.727031][T25278] veth0_macvtap: entered promiscuous mode [ 2212.739396][T25278] veth1_macvtap: entered promiscuous mode [ 2212.795336][T25278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2212.810987][T25278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2212.829673][ T9585] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.840952][ T9585] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.850492][ T9585] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.867878][ T9585] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2215.176391][T25396] random: crng reseeded on system resumption [ 2216.283246][T25401] loop0: detected capacity change from 0 to 8 [ 2217.331369][ T9585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.433155][T25409] SQUASHFS error: Unable to read directory block [2c0:35] [ 2219.468711][ T9582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2219.518010][ T9582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2220.744652][T23064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2220.755283][T23064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2220.763740][T23064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2220.772027][T23064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2220.780273][T23064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2221.111301][T25429] overlayfs: failed to get inode (-116) [ 2221.120860][T25429] overlayfs: failed to get inode (-116) [ 2222.186799][ T9585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.853030][T23064] Bluetooth: hci1: command tx timeout [ 2224.341769][T25442] loop4: detected capacity change from 0 to 16 [ 2224.393457][T25442] erofs (device loop4): mounted with root inode @ nid 36. [ 2225.873387][T23064] Bluetooth: hci1: command tx timeout [ 2225.920238][ T9585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.990844][ T6533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.000285][ T6533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.953758][T23064] Bluetooth: hci1: command tx timeout [ 2228.807148][T25454] syz.4.5329 (25454): drop_caches: 2 [ 2229.374222][T25459] netlink: 'syz.6.5336': attribute type 1 has an invalid length. [ 2229.439462][ T9585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.647564][T25471] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 2229.654132][T25471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2229.662058][T25471] vhci_hcd vhci_hcd.0: Device attached [ 2229.870165][T25463] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2229.884936][T25464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2229.902038][ T6533] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2230.013445][T23064] Bluetooth: hci1: command tx timeout [ 2230.063247][T24394] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 2231.042702][T25472] vhci_hcd: connection closed [ 2231.278743][ T6517] vhci_hcd: stop threads [ 2231.334707][ T9582] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2231.715848][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2231.953529][T14799] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2232.230650][ T6517] vhci_hcd: release socket [ 2232.235302][ T6517] vhci_hcd: disconnect device [ 2232.291451][T25459] veth3: entered promiscuous mode [ 2232.393253][T14799] usb 1-1: Using ep0 maxpacket: 8 [ 2232.428512][T14799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2232.493097][T14799] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2232.536981][T14799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.623841][T14799] usb 1-1: config 0 descriptor?? [ 2232.924460][ T9585] bridge_slave_1: left allmulticast mode [ 2232.933786][ T9585] bridge_slave_1: left promiscuous mode [ 2232.948191][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2232.968404][ T9585] bridge_slave_0: left allmulticast mode [ 2232.977115][ T9585] bridge_slave_0: left promiscuous mode [ 2232.982986][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.590753][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2233.633674][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2233.682197][ T9585] bond0 (unregistering): Released all slaves [ 2233.779913][T25422] chnl_net:caif_netlink_parms(): no params data found [ 2234.018968][T25422] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.030764][T25422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.046382][T25422] bridge_slave_0: entered allmulticast mode [ 2234.054768][T25422] bridge_slave_0: entered promiscuous mode [ 2234.064428][T25422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.071809][T25422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.079535][T25422] bridge_slave_1: entered allmulticast mode [ 2234.088276][T25422] bridge_slave_1: entered promiscuous mode [ 2234.207879][T25422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.221491][T25422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2235.313435][T12862] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2235.460619][T25422] team0: Port device team_slave_0 added [ 2235.477549][ T9585] hsr_slave_0: left promiscuous mode [ 2235.495870][ T9585] hsr_slave_1: left promiscuous mode [ 2235.502128][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2235.520982][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2235.530086][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2235.540058][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2235.577610][ T9585] veth1_macvtap: left promiscuous mode [ 2235.587149][T14799] usbhid 1-1:0.0: can't add hid device: -71 [ 2235.623833][ T9585] veth0_macvtap: left promiscuous mode [ 2235.760674][ T9585] veth1_vlan: left promiscuous mode [ 2235.766297][T14799] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2235.775050][ T9585] veth0_vlan: left promiscuous mode [ 2235.857551][T14799] usb 1-1: USB disconnect, device number 3 [ 2237.371081][T24394] vhci_hcd: vhci_device speed not set [ 2238.509495][T23427] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2240.313271][T23427] usb 7-1: device not accepting address 15, error -71 [ 2241.479322][T25521] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5349'. [ 2241.529689][T25527] loop8: detected capacity change from 0 to 8 [ 2241.555878][T25521] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5349'. [ 2241.591517][T25521] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5349'. [ 2241.835310][T25521] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5349'. [ 2241.957879][T25532] SQUASHFS error: Unable to read directory block [2c0:35] [ 2243.380246][ T30] audit: type=1800 audit(2000001973.800:805): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5351" name="SYSV798dd834" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2246.473111][T23427] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2246.783177][T23427] usb 7-1: Using ep0 maxpacket: 8 [ 2246.820368][T23427] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2247.043028][T23427] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2248.191230][T23427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.495840][T19557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2248.544566][T19557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2248.556433][T19557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2248.565048][T19557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2248.572819][T19557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2249.534173][T23427] usb 7-1: config 0 descriptor?? [ 2249.560895][T23427] usb 7-1: can't set config #0, error -71 [ 2249.611750][T23427] usb 7-1: USB disconnect, device number 17 [ 2251.572279][T23064] Bluetooth: hci4: command tx timeout [ 2252.861247][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 2252.903595][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 2253.304771][T25422] team0: Port device team_slave_1 added [ 2253.400571][T25422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2253.414042][T25422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2253.445858][T25422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2253.460718][T25422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2253.467970][T25422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2253.494472][T25422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2253.608679][T25422] hsr_slave_0: entered promiscuous mode [ 2253.618695][T25422] hsr_slave_1: entered promiscuous mode [ 2253.624729][T23064] Bluetooth: hci4: command tx timeout [ 2253.938891][ T9585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.990255][T25572] chnl_net:caif_netlink_parms(): no params data found [ 2254.059965][ T9585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.122049][ T9585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.178331][T25572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.185571][T25572] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.192692][T25572] bridge_slave_0: entered allmulticast mode [ 2254.201668][T25572] bridge_slave_0: entered promiscuous mode [ 2254.226977][ T9585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.242043][T25572] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.249582][T25572] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.257243][T25572] bridge_slave_1: entered allmulticast mode [ 2254.264766][T25572] bridge_slave_1: entered promiscuous mode [ 2254.362352][T25572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2254.376379][T25572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2254.437224][T25572] team0: Port device team_slave_0 added [ 2254.446142][T25572] team0: Port device team_slave_1 added [ 2254.511765][T25572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2254.522905][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2254.551807][T25572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2254.571251][T25422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2254.585197][T25422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2254.596873][T25572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2254.604239][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2254.631035][T25572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2254.650978][T25422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2254.692382][T25422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2254.734657][T25572] hsr_slave_0: entered promiscuous mode [ 2254.741370][T25572] hsr_slave_1: entered promiscuous mode [ 2254.748060][T25572] debugfs: 'hsr0' already exists in 'hsr' [ 2254.754129][T25572] Cannot create hsr debugfs directory [ 2254.762028][ T9585] bridge_slave_1: left allmulticast mode [ 2254.769270][ T9585] bridge_slave_1: left promiscuous mode [ 2254.775726][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.786778][ T9585] bridge_slave_0: left allmulticast mode [ 2254.792407][ T9585] bridge_slave_0: left promiscuous mode [ 2254.798361][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2255.080001][ T9585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2255.095792][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2255.106045][ T9585] bond0 (unregistering): Released all slaves [ 2255.460880][ T9585] hsr_slave_0: left promiscuous mode [ 2255.468518][ T9585] hsr_slave_1: left promiscuous mode [ 2255.475217][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2255.482579][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.490750][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2255.498192][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.519515][ T9585] veth1_macvtap: left promiscuous mode [ 2255.525178][ T9585] veth0_macvtap: left promiscuous mode [ 2255.530778][ T9585] veth1_vlan: left promiscuous mode [ 2255.536322][ T9585] veth0_vlan: left promiscuous mode [ 2255.694629][T23064] Bluetooth: hci4: command tx timeout [ 2255.990789][ T9585] team0 (unregistering): Port device team_slave_1 removed [ 2256.036703][ T9585] team0 (unregistering): Port device team_slave_0 removed [ 2256.460138][T25422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2256.518586][T25422] 8021q: adding VLAN 0 to HW filter on device team0 [ 2256.537543][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.544715][ T9569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2256.587067][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.594225][ T9569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2256.681379][T25422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2256.789485][ T9585] ------------[ cut here ]------------ [ 2256.795281][ T9585] WARNING: CPU: 1 PID: 9585 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x9f/0x160 [ 2256.805720][ T9585] Modules linked in: [ 2256.809964][ T9585] CPU: 1 UID: 0 PID: 9585 Comm: kworker/u8:50 Not tainted syzkaller #0 PREEMPT(full) [ 2256.819631][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2256.830646][ T9585] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2256.836338][ T9585] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 [ 2256.842663][ T9585] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 22 8a 9d f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 2256.863327][ T9585] RSP: 0018:ffffc9000b1d7a90 EFLAGS: 00010293 [ 2256.869420][ T9585] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff5200163af23 [ 2256.877584][ T9585] RDX: ffff8880343d5ac0 RSI: ffffffff8a1f5d5e RDI: ffff888035d6c000 [ 2256.885839][ T9585] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 2256.889048][T25572] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2256.894010][ T9585] R10: ffffffff90824ed7 R11: 0000000000000001 R12: ffff888035d6c000 [ 2256.894064][ T9585] R13: dffffc0000000000 R14: fffffbfff205e728 R15: ffffffff902f3920 [ 2256.894096][ T9585] FS: 0000000000000000(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000 [ 2256.925684][ T9585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2256.933796][ T9585] CR2: 00007ffcbc748c48 CR3: 00000000764eb000 CR4: 0000000000350ef0 [ 2256.941790][ T9585] Call Trace: [ 2256.945935][ T9585] [ 2256.948882][ T9585] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 2256.955318][ T9585] ops_undo_list+0x2ee/0xab0 [ 2256.959954][ T9585] ? __pfx_ops_undo_list+0x10/0x10 [ 2256.965125][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2256.970803][ T9585] ? idr_destroy+0x62/0x2e0 [ 2256.975671][ T9585] cleanup_net+0x41b/0x8b0 [ 2256.980136][ T9585] ? __pfx_cleanup_net+0x10/0x10 [ 2256.985152][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2256.990815][ T9585] ? rcu_is_watching+0x12/0xc0 [ 2256.995684][ T9585] process_one_work+0x9cf/0x1b70 [ 2257.000670][ T9585] ? __pfx_cleanup_net+0x10/0x10 [ 2257.005804][ T9585] ? __pfx_process_one_work+0x10/0x10 [ 2257.011208][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.016911][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.022574][ T9585] ? assign_work+0x1a0/0x250 [ 2257.027225][ T9585] worker_thread+0x6c8/0xf10 [ 2257.031865][ T9585] ? __pfx_worker_thread+0x10/0x10 [ 2257.037949][ T9585] kthread+0x3c5/0x780 [ 2257.042044][ T9585] ? __pfx_kthread+0x10/0x10 [ 2257.047477][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.053196][ T9585] ? rcu_is_watching+0x12/0xc0 [ 2257.057998][ T9585] ? __pfx_kthread+0x10/0x10 [ 2257.062614][ T9585] ret_from_fork+0x675/0x7d0 [ 2257.067330][ T9585] ? __pfx_kthread+0x10/0x10 [ 2257.071950][ T9585] ret_from_fork_asm+0x1a/0x30 [ 2257.076946][ T9585] [ 2257.079979][ T9585] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2257.087262][ T9585] CPU: 1 UID: 0 PID: 9585 Comm: kworker/u8:50 Not tainted syzkaller #0 PREEMPT(full) [ 2257.096824][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2257.106888][ T9585] Workqueue: netns cleanup_net [ 2257.111685][ T9585] Call Trace: [ 2257.114966][ T9585] [ 2257.117898][ T9585] dump_stack_lvl+0x3d/0x1f0 [ 2257.122510][ T9585] vpanic+0x640/0x6f0 [ 2257.126525][ T9585] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2257.131912][ T9585] panic+0xca/0xd0 [ 2257.135662][ T9585] ? __pfx_panic+0x10/0x10 [ 2257.140124][ T9585] ? check_panic_on_warn+0x1f/0xb0 [ 2257.145271][ T9585] check_panic_on_warn+0xab/0xb0 [ 2257.150245][ T9585] __warn+0xf6/0x3c0 [ 2257.154147][ T9585] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2257.159546][ T9585] report_bug+0x3c3/0x580 [ 2257.163895][ T9585] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2257.169291][ T9585] handle_bug+0x184/0x210 [ 2257.173652][ T9585] exc_invalid_op+0x17/0x50 [ 2257.178189][ T9585] asm_exc_invalid_op+0x1a/0x20 [ 2257.183051][ T9585] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 [ 2257.189055][ T9585] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 22 8a 9d f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 2257.208674][ T9585] RSP: 0018:ffffc9000b1d7a90 EFLAGS: 00010293 [ 2257.214754][ T9585] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff5200163af23 [ 2257.222730][ T9585] RDX: ffff8880343d5ac0 RSI: ffffffff8a1f5d5e RDI: ffff888035d6c000 [ 2257.230709][ T9585] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 2257.238687][ T9585] R10: ffffffff90824ed7 R11: 0000000000000001 R12: ffff888035d6c000 [ 2257.246666][ T9585] R13: dffffc0000000000 R14: fffffbfff205e728 R15: ffffffff902f3920 [ 2257.254662][ T9585] ? xfrm6_tunnel_net_exit+0x9e/0x160 [ 2257.260064][ T9585] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 2257.265893][ T9585] ops_undo_list+0x2ee/0xab0 [ 2257.270508][ T9585] ? __pfx_ops_undo_list+0x10/0x10 [ 2257.275632][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.281285][ T9585] ? idr_destroy+0x62/0x2e0 [ 2257.285807][ T9585] cleanup_net+0x41b/0x8b0 [ 2257.290244][ T9585] ? __pfx_cleanup_net+0x10/0x10 [ 2257.295202][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.300858][ T9585] ? rcu_is_watching+0x12/0xc0 [ 2257.305651][ T9585] process_one_work+0x9cf/0x1b70 [ 2257.310618][ T9585] ? __pfx_cleanup_net+0x10/0x10 [ 2257.315574][ T9585] ? __pfx_process_one_work+0x10/0x10 [ 2257.320963][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.326625][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.332275][ T9585] ? assign_work+0x1a0/0x250 [ 2257.336885][ T9585] worker_thread+0x6c8/0xf10 [ 2257.341509][ T9585] ? __pfx_worker_thread+0x10/0x10 [ 2257.346637][ T9585] kthread+0x3c5/0x780 [ 2257.350718][ T9585] ? __pfx_kthread+0x10/0x10 [ 2257.355324][ T9585] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2257.360975][ T9585] ? rcu_is_watching+0x12/0xc0 [ 2257.365762][ T9585] ? __pfx_kthread+0x10/0x10 [ 2257.370364][ T9585] ret_from_fork+0x675/0x7d0 [ 2257.374961][ T9585] ? __pfx_kthread+0x10/0x10 [ 2257.379564][ T9585] ret_from_fork_asm+0x1a/0x30 [ 2257.384376][ T9585] [ 2257.387676][ T9585] Kernel Offset: disabled [ 2257.391998][ T9585] Rebooting in 86400 seconds..