last executing test programs: 1m41.160893691s ago: executing program 4 (id=378): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000001c0)=[0x4, 0x265], 0x2) 1m36.023030836s ago: executing program 4 (id=383): mkdir(&(0x7f0000000400)='./file0\x00', 0x80) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)) rmdir(&(0x7f0000000000)='./bus/file0\x00') lchown(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000088c0)) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000008e00), 0x60800, 0x0) r1 = io_uring_setup(0x13ad, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000008e40), 0x802, 0x0) syz_open_dev$vcsu(&(0x7f0000008e80), 0x2, 0x80002) syz_open_dev$mouse(&(0x7f0000008ec0), 0x80, 0x402) accept4$packet(0xffffffffffffffff, &(0x7f0000008f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008f40)=0x14, 0x800) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000008f80), 0x30100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f000001aa80)=""/102388, 0x18ff4}], 0x1, 0x0, 0x0) 1m32.007406797s ago: executing program 4 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r4, &(0x7f0000000100)=""/94, 0x5e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getdents64(r4, 0xfffffffffffffffe, 0x3d) read(r3, &(0x7f0000000200)=""/213, 0xd5) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000900000000000010000"], 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0bc5310, &(0x7f0000000180)) tkill(r2, 0x7) 1m28.727050485s ago: executing program 4 (id=393): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000008000000000000000000000000000000001b00046e6f6400767b65746f6f7e054ec60405000037d93a8b000000003800704a86cec602007dfa673efeeb09b5351f5bde054000000000187b8200b500002b595fcb14030356b9fd9ef196a51cd50100000003b494e11400cf5f2a70f5e9930e005db45a00000000000000d05700060076b3d816caf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400529a451b34ffffdab2884baf050000000000000047ec21aebff2dd021a47c680e8e289da649a370003389562a66270d91955d80a0cbf7dec14782c016f6465762f6eb17b2300f9daa5ee23266ecf857da65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/548, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) syz_80211_inject_frame(&(0x7f0000000540), &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES64, @ANYRES32], 0x36) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x2, @name="f4e06b0a1e730e142a5c1e8623218cb8167a99b19faf6797ae55586411baebc8"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00004ea000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r5, 0xfb688000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m21.542472504s ago: executing program 4 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3) 1m17.378114547s ago: executing program 4 (id=408): unshare(0x2c060000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0xd, 0x2004, @fd, 0x325d, 0x0, 0x0, 0x14, 0x1}) rt_sigsuspend(&(0x7f00000001c0)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x2, 0x0, 0x1a9}) syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x2) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) 1m5.160762034s ago: executing program 0 (id=426): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000001900)=ANY=[], 0xfd, 0x22e, &(0x7f0000000c00)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100001, &(0x7f0000000940)={[{@nobh}, {@bsdgroups}, {@quota}, {@norecovery}]}, 0xdc, 0x4ad, &(0x7f0000001740)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280)={[], [{@euid_eq}]}, 0x1, 0x76a, &(0x7f0000000fc0)="$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") chdir(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getpid() syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyBEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbWFLu0X7+SSz+97Mm7737cxr38zrBDCyprI/ScTWiPgjIibq2eYCU/V/166cW7h+5dxCEtXqu38ntXJXr5xbKIoW+23JM9NpRPp5Ervb1Lty5uzx+Upl6VSen1098dHsypmzLxw7MX906ejSyf2HDh08MPfyS/tf7EucWZuu7vpkec/Otz74+u3DX2brxov4W+Lok6luG5+uVvtc3XBta0gnY0NsCOtSiojscJVr/X8iSrF28Cbizc+G2jhgoKrVanVL583nq8D/WBLNeV0eRkXxRZ9d/xZL6yDg1cENP4bu8mv1C6As7mv5Ut8yFmleptxyfdtPUxHx/vl/vs2WGMx9CACAJj9m45/n243/0nioodx9+dzQZETcHxHbI+KBiNgREQ9G1Mo+HBGPrLP+1kmSm8c/6aWeArtN2fjvlXxuq3n8V4z+YrKU57bV4i8nR45Vlvbl78l0lDdl+bkudfz0xu9fddrWOP7Llqz+YiyYt+PS2KbmfRbnV+fvJOZGly9E7BprF39yYyYgiYidEbGrxzqOPfv9nk7bbh1/F32YZ6p+F/FM/fifj5b4C0n3+cnZe6KytG+2OCtu9utvF9/pVP8dxd8H2fG/t+35fyP+yaRxvnZl/XVc/POLjtc0vZ7/48l7tfR4vu70/OrqqbmI8eRwvdGN6/ev7Vvki/JZ/NN72/f/7bH2TuyOiOwkfjQiHouIx/O2PxERT0bE3i7x//L6Ux/2Hv9gZfEvruv4ryXGo3VN+0Tp+M8/NFU6eVP817sf/4O11HS+5nY+/26nXb2dzQAAAPDfk0bE1kjSmRvpNJ2Zqf9efkdEWlleWX3uyPLHJxfrzwhMRjkt7nRNNNwPncsv6+v5CxFR/2lBsf1Aft/4m9LmWn5mYbmyOOzgYcRt6dD/M3+Vht06YOA8rwWjS/+H0aX/w+jS/2F0ten/m4fRDmDjtfv+/3QI7QA2Xkv/N+0HI8T1P4wu/R9Gl/4PI2llc9z6IfmuieKVety9W2LsdP2l+//KG5CI8l3RjIElIr0rmiExoMQQP5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66N8AAAD//8fe3d4=") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(0x0, 0x0) 1m2.383190579s ago: executing program 0 (id=433): socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000680)=""/215, 0x71) r3 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000000000000007000000014410"], 0x28}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2041, 0x1}, 0x10, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) 1m1.301794181s ago: executing program 0 (id=435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "dfa27021fe106750"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r4, &(0x7f0000002fc0)=[{&(0x7f00000000c0)="14bf844d529717198afe147d89ae6b1cbc70c9e62941cd46e859f3a5791d5644", 0x20}, {&(0x7f0000002a80)="15fbac2083d2d244707fa98eef16d52c70d4e3e7090947500d7aeb945a029f42878e07262476362de177ebe986b5883566382161ad97869845d8da037e7409f9df9aec", 0x7fc5}, {&(0x7f0000002b00)="e6ff80fbfbab9c2c9f3d8d7c3efe5e219a8487b411f91cdbb0c6ab538837e4b12b94c0a4c75c988e101a57350116e74c823f2304e8db49ed2bbeefaa412c61f02321e1f571343f39cc", 0x49}, {&(0x7f0000002b80)="d83b60dd671544595fb418a7cd076dae020018", 0x13}], 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x7fffffff, 0x7fff, {{0x20, 0x4, 0x0, 0x2b, 0x80, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@rr={0x7, 0x23, 0x77, [@local, @local, @loopback, @private=0xa010102, @remote, @multicast2, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0x91, 0x3, 0x6, [{@local, 0x100}, {@private=0xa010101, 0x8}, {@multicast1, 0x25}, {@dev={0xac, 0x14, 0x14, 0x14}}]}, @timestamp={0x44, 0x24, 0x76, 0x0, 0x7, [0x2, 0x9, 0x14e, 0x7, 0x8001, 0x7, 0x3, 0x9]}]}}}}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003ac0)={0x1, 0x58, &(0x7f0000003a40)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005500)={'syztnl1\x00', &(0x7f0000005480)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x75, 0x5, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x40, 0x0, 0xfffffffa}}) 59.623950953s ago: executing program 0 (id=439): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f00000001c0)=[0x4, 0x265], 0x2) 59.514605122s ago: executing program 1 (id=440): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000240)=0x0) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r7, 0x2, &(0x7f0000000f40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0x4, r6, 0x0, 0x0, 0x5, 0x0, 0x2}]) 58.379200579s ago: executing program 1 (id=441): syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56b, &(0x7f0000000640)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x28d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x280000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r2}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x56}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], 0x0, 0x3c, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb010018000000000006000043f6c91b203ed700040000000000000e02008ea300000088d38b56c388aada9f24134e10c81f0b00000000000000000000772911491c346569106023859d92966b6543cedf7e312255af86e0fae6182eabe33f6ce7decdc4522b57748aa3aa209483fd99ea0501b7769fed7221e9d79e7c2e1624b6ef528774044491058eb6c306f27078fe0f5ad7475e63f3b012c4405c900c892256"], &(0x7f0000000b00)=""/129, 0x2e, 0x81, 0x1, 0x1000, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0x1}, &(0x7f0000000d00), &(0x7f0000000d40)='%ps \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f0000000080)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000001140)=""/4096, &(0x7f0000000600), &(0x7f0000000640), 0x1, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 57.900901759s ago: executing program 0 (id=442): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000003c0)={0x0, 0xfffd}) close(r3) r6 = openat(0xffffffffffffff9c, 0x0, 0x20081, 0x12) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000b00)={[0x1000, 0x9800, 0xf000, 0x10000], 0x5, 0x20, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 56.798389633s ago: executing program 0 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), 0x0, 0xff02, 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_DELTABLE={0x104, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "6228a66794e5ebbed90e5deb9df67cd5a87813149d364d6cbf320b90a90a158031f78910b2f4bea49b20697d0209a42a55963c8e6cc9"}, @NFTA_TABLE_USERDATA={0x50, 0x6, "869cda1acfd22350f5f3f6cb48e4c9c73c28c93492ca88e3c1fa41cb773088967967c1a3ca6f45b85e27566359d68c06266d57a753648d27af94a7ef8ed60f102df9d742263f3f3f904bc75b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x36, 0x6, "a9fcdb39b030578f8cbba81388c387522aa29ebbea96667682020aee59fa58994c0d300dc6ac7c536e83da1452e5978d0624"}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x10}}, 0x180}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x6f659545a947ee0a, 0x5f, 0x23, 0x5, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x700, 0x40, 0x80000001, 0x4}}) 56.47798987s ago: executing program 1 (id=445): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x4f6a, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x4000000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x5b43, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, &(0x7f0000000480)=""/235}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c647eb189759d0b9300a32b82936ab22e032fe3a2412d1bfe321ab0474a6a937bbb3d63e85f09544e16fd467359ea173c68dc45df27f1e99114a878c86e9377e549a"], 0x8) sendto$l2tp6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x20) 53.898758169s ago: executing program 1 (id=446): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c2, &(0x7f0000000400)=ANY=[@ANYBLOB='usrquota,iocharset=cp949,discard,integrity,quota,uid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',fsname=]}@}X}[-)+,fsname=obj_role,subj_user=,subj_role=*,fowner>', @ANYRESDEC, @ANYBLOB=',\x00'], 0xff, 0x6178, &(0x7f000000c680)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0bER09FbG2vr9aLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAChNVVVVJ33MP5M+33fb7hQAMBX59b9K8vJTX//6n2/9ZZb6o1ar1Wr1FOqmarx7zSIiNpq3qd8zOBwPACfMRnzcdhdokfyL1o+IJ9ruBDDTOm13gGOxtb2+2kn5dpqvB8u77flckH35b3QeXN8xaXqQ0XNMpvX42oxePDOhPwtT6sMsyfl3R/O/tts+TOsdd/7TMin/4e6lT8XJ+fdG8x9xevLvjs2/VDn//iPl35M/AAAAAADMsPz//0stH/+dO/qmHMonHf9dnlIfAAAAAAAAAOBxO+r4fw8Y/w8AAABmVv1Zvfabp/aWTfoutnr51U7EkyPrA4VJF8sstt0PAAAAAAAAAAAAAChJf/cc3qudiEFEPLm4WFVV/dM0Wj+qo97+pCt9+6FkbT/JAwDAro+eGrmWvxMxHxFX03f9DRYXF6tqfmGxWqwW5vL72eHcfLXQ+Fybp/WyueEh3hD3h1X9y+Ybt2s66PPyQe2jv6++r2HVO0THHpNB+mtOaG4pbABIdl+NtrwinTJV9fSkNx+wj/3/FFqKpbYfV8y+th+mAAAAwPGrqqrqpK/zPpOO+Xfb7hQAMBX59X/0uMCR6u6E9ojH8/vVarVarVZ/qrqpGu9es4iIjeZt6vcMhuMHgBNmIz5uuwu0SP5F60fEc213AphpnbY7wLHY2l5f7aR8O83XgzS+ez4XZF/+G52d2+Xbj5seZPQck2k9vjajF89M6M+zU+rDLMn5d0fzv7bbPkzrHXf+0zIp/+HOJXPlyfn3RvMfcXry747Nv1Q5//4j5d+TPwAAAAAAzLD8//9Ljv/mTQYAAAAAAACAE2dre301X/eaj/9/bsx6rv88nXL+nUfNfyHNy/9Ey/l3R/L/8sh6vcb8/Tf39v9/b6+v/v7Ovz6bp4fNfy7PdNIjq5MeEZ10T51+mh5l6x62OegN63sadLq9fjrnpxq8EzfiZqzFhX3rdtPfY699ZV973dPBvvaL+9r7D7Vf2tc+SN87UC3k9nOxGj+Jm/H2TnvdNnfA9s8f0F4d0J7z73n+L1LOv9/4qfNfTO2dkWnt/ofdh/b75nTc/bxx4/O/vHD8m3Ogzeg92LamevvOttCfnb/JE8P42e21W+fuXr9z59ZKpMm+pRcjTR6znP9g52du7/n/hd32/Lzf3F/vfzh85PxnxWb0J+b/QmO+3t6Xpty3NuT8h+kn5/92ah+//5/k/Cfv/y+30B8AAAAAAAAAAAAAAAD4JFVV7Vwi+kZEXE7X/7R1bSYAMF359b9K8nK1Wq1Wq9Wnr26qxnu9WUTEX5u3qd8z/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpi213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+cWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOPPx8743Ocmjf99Nh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5P98Y77zO/8zI8OsljP86OuZ9CXL+ZxuP5zr/L42s18y/+u3M5b9x2BU3o7sv//N33vvp+dvvf/DKjfeuv7v27tqPL62sXLh0+fKVK1fOv3Pj5tqF3X+Pp9czIOefx752HmhZcv45c/mXJef/hVTLvyw5/y+mWv5lyfnn93vyL0vOP3/2kX9Zcv4vpVr+Zcn5fyXV8i/L1vb6XJ3/y6mWf1ny/v/VVMu/LDn/V1It/7Lk/M+lWv5lyfmfT/Uh8vf18KdIzj8f4bL/lyXnv5Jq+Zcl538x1fIvS87/UqrlX5ac/6upln9Zcv5fS7X8y5Lzv5xq+Zcl5//1VMu/LDn/K6mWf1ly/t9ItfzLkvP/ZqrlX5ac/2upln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT8X0+1/Muy9/3/ZsyYMZNn2n5mAgAAAAAAAAAAAABGTeN04ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzda4xcZ30G8DN7sdcOIQZCcFIDa8cY4yzZ9SW+0LqYcG2AUiCh0Au2612bBd/w2iVQJJsGSiSMiiqqph/aAoraSFWFVfGBVinNh6qXT037gX6pqCohNapCFFCR2opmq5nzvq9nZmdndr2T9ex5fz8p+Xt3zsw5c+ad2X3WfnYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZlvfOvPFWlEU9f8a/9tUFC+p/3nD+KbG5950s48QAAAAWKn/a/z/+dvSJ44s4UpN2/zda/7xW/Pz8/PFh4d/d/Sr8/PpgvGiGF1fFI3Lomv//pFa8zbBI8VYbajp46Eeux/ucflIj8tHe1y+rsfl63tcPtbj8gUnYIEN5c9jGje2vfHHTeUpLW4vRhuXbe9wrUdq64eG4s9yGmqN68yPnixmi9PFTDHVsn25ba2x/ZNb6/t6VxH3NdS0ry31FfLDz56Ix1AL53h7y76u32b0g7cU4z/64WdP/PHFZ+/sNHuehpbbK49z57b6cX4+fKY81lqxPp2TeJxDTce5pcNjMtxynLXG9ep/bj/O55d4nMPXD3NVtT/mY8VQ489PN87TSPOP9dJ52hI+9993F0Vx5fpht2+zYF/FULGx5TND1x+fsXJF1m+jvpReXowsa51uXcI6rc/p7a3rtP05ER//reF6I4scQ/PD9IPPrVvwuC93nUb1e73Yc6V9Dfb7uTIoazCui6cbd/rRjmtwe7j/n92x+BrsuHY6rMF0v5vW4LZea3Bo3XDjmNODUGtc5/oa3N2y/XBjT7XGfGZH9zU4efHM+cm5T3/mjbNnjp+aOTVzdu/u3VN79+8/ePDg5MnZ0zNT5f9v8GwPvo3FUHoObAvnLj4HXt+2bfNSnf96/56HY12eh5vatu3383Ck/c7VVucJuXBNl8+NB+snfezqULHIc6zx+Oxa+fMw3e+m5+FI0/Ow49eUDs/DkSU8D+vbnN+1tO9ZRpr+63QML9bXgk1Na7D9+5H2Ndjv70cGZQ2OhXXxr7sW/1qwJRzvoxPL/X5keMEaTHc3vPbUP5O+3x872Bid1uVd9QtuWVdcmpu5cO/Dxy9evLC7CGNVvKJprbSv141N96lYsF6Hlr1ej8y+5tG7Onx+UzhXY2+s/29s0ceqvs2+e7s/Vo2vbp3PZ8tn9xRh9Nlqn89OX83r5zNlyS7ns77N5ydX/r14yqVNr7+ji7z+xtz/Qrm/dFOPDI+OlM/f4XR2Rltej1sfqpHGa1etse/nJ5f2ejwa/lvt1+Pbu7web27btt+vx6Ptdy6+Htd6/bRjZdofz7GwTk5PdX89rm+zec9y1+RI19fju8OshfP/hpAUUi5qWjuLrdu0r5GR0XC/RuIeWtfp3pbtR0M2q+/riT03tk533l3e1nC6d9et1jodb9u23+s0vV4ttk5rvX76dmPaH8+xsC5u39t9nda3eWrfyl87N8Q/Nr12ruu1BkeH19WPeTQtwvL1fn5DXIP3FieKc8XpYrpx6brGeqo19jVx39LW4Lrw32q/Vm7usgZ3tm3b7zWYvo4ttvZqIwvvfB+0P55jYV08dl/3NVjf5m0H+vu9687wmbRN0/eu7T9fW+xnXne1naYX82de9eP8mwPdfzZb3+b0weXmzO7n6Z7wmVs6nKf25+9iz6npYnXO0+ZwnM8eXPw81Y+nvs1XDy1xPR0piuLyJ+9v/Lw3/P3Kn1/67rda/t6l09/pXP7k/c/devJvl3P8AKx9L5RjY/m1rulvppby9/8AAADAmhBz/1CYifwPAAAAlRFzf/xX4Yn8DwAAAJURc/9ImEkm+X/z256dfeFykZr580G8PJ2GB8rtYsd1Knw8Pn9d/fP3Pz7z47+8vLR9DxVF8ZMHfqPj9psfiMdVGg/Hee3trZ9feMXLS9r/sYeub9fcX/9auP14f5a6DDpVcKeKonjyti839jP+kauN+dQDxxrzA1cefaS+zfOHyo/j9Z95Rbn9H4Ty75GTx1uu/0w4D98Pc+rdnc9HvN43r75hy4EPXd9fvF5t20sbd/uxj5a3G39PzlceKbeP53mx4/+rLz3xzfr2D7+u8/FfHup8/E+E2308zP95dbl982NQ/zhe7wvh+OP+4vXu/cZ3Oh7/tS+W259/R7ndsTDj/neGj7e/49nZ5vP1cO14y/0q3lluF/c/9d3fblweby/efvvxjx292nI+2tfHU/9c3s5k2/bx83E/0V+07b9+O83rM+7/id861nKee+3/2geeeXX9dtv3f0/bdsNt12//jU1/+IUvd9xfPJ4jf3a+5f4ceX94Hof9P/bRsB7D5f977cst+42Ovb/19Sdu/7VNl1vuT/SuH5X7v/bmU435H+M//v1bXnLrS6+8tn7uiuLpD5a312v/p/7oXMvxf/2OXY3HI14eO/rt+19M3P+FT02cPTd3aXa66aw2fnfOe8rjWT+2YWP9eG8Lr63tHx89d/FjMxfGp8animK8ur9C74Z9I8znynFludff9VB4PO/6vSc37vinL8XP/8uD5eevvrv8uvX6sN1Xwuc3lY/ffG2F+39s6x2N53ftqfLjlh57H2zZ/p8Hl7RhuP/t3xfE9X7+lR9rnIf6ZY2vG/F5vcLj/950eTvfDud1Pvxm5m13XN9f8/bxdyNc/WD5fF/x+Qsvc/Fx/ZPweL/3++Xtx+OK9/d74fuY72xufb2L6+Pbl4fab7/xWzyuhNeT4kp5edwqnu+rz9/R8fDi7yEprtzZ+Ph30u3cuay7uZi5T89Nnp49e+nhyYszcxcn5z79maNnzl06e/Fo43d5Hv14r+tff33a2Hh9mp7Zv6+Y2lAUxbliahVesF6c46//aWnHf/6hE9MHpnZMz5w8funkxYfOz1w4dWJu7sTM9NyO4ydPznyq1/Vnpw/v3nNo74E9E6dmpw8fPHRo76GJ2bPn6odRHlQP+6c+MXH2wtHGVeYO7zu0+7779k1NnDk3PXP4wNTUxKVe1298bZqoX/vXJy7MnD5+cfbMzMTc7GdmDu8+tH//np6/DfDM+ZNz45MXLp2dvDQ3c2GyvC/jFxufrn/t63V9qmnu38rvZ9vVyl/EV7zvnv3p97PWPf65RW+q3KTtF4g+G34XzT+87PzBpXwcc/9omEkm+R8AAAByEHP/ujAT+R8AAAAqI+b+9WEm8j8AAABURsz9Y2EmmeR//X/9/6X1/8vL9f/z6v+f/2TZK13r/f/Yn19z/f/R8kVZ/395bnL/f8X71//X/69e/3/p/fm1fvz6//r/LDRo/f+Y+zcURZb5HwAAAHIQc//GMBP5HwAAACoj5v5bwkzkfwAAAKiMmPtfEmaSSf7X/19S/39Pr8JV9fv/3v9f/79Ym/3/+OCsxf6/9/+/Icvu33/owZYP9f8D/X/9f/1//X/9f1ZsdNFLblb/P+b+W8NMMsn/AAAAkIOY+18aZiL/AwAAQGXE3H9bmIn8DwAAAJURc/+mMJNM8r/+v/f/1//X/690/3+l7//fdDD6/2uD9/+P2p9JJf3/Hm64/z+m/78W+/+j/T3+we7/9zx8/X9eFIP2/v8x978szCST/A8AAAA5iLn/5WEm8j8AAABURsz9rwgzkf8BAACgMmLuvz3MJJP8r/+v/6//r/+v/995/73f/7/8k/7/YNH/707/vwfv/59X/7/Pxz/Y/f9+v///6Nvbr6//TyeD1v+Puf+VYSaZ5H8AAADIQcz9d4SZyP8AAABQGTH3vyrMRP4HAACAyoi5f3OYSSb5X/9f/1//X/9f/7/z/nv3/0v6/4NF/787/f8e9P/1//X/l9b/7/DNr/4/nQxa/z/m/jvDTDLJ/wAAAJCDmPvvCjOR/wEAAKAyYu7/qTAT+R8AAAAqI+b+LWEmmeR//X/9f/3/vPr/96zT/9f/rzb9/+70/3vQ/9f/1/9f4vv/L7Sc/v/6XjdGZQxa/z/m/leHmWSS/wEAACAHMfe/JsxE/gcAAIDKiLn/tWEm8j8AAABURsz942EmmeR//f9q9f//9K8fe22h/6//32P/Fe3/x2Wg/585/f/u9P970P/X/9f/X5X+P/kYtP5/zP1bw0wyyf8AAACQg5j7t4WZyP8AAABQGTH33x1mIv8DAABAZcTcvz3MJJP8r/9frf5/pP+v/99t/xXt/yf6/3nT/++g6Umq/9+D/r/+f/b9//jdr/4//TFo/f+Y+18XZpJJ/gcAAIAcxNy/I8xE/gcAAIDKiLn/9WEm8j8AAABURsz9O8NMMsn/+v/6//r/+v/6/533r/+/Nun/d7fc/v86/X/9f/3/zPr/3v+f/hq0/n/M/W8IM8kk/wMAAEAOYu7fFWYi/wMAAEBlxH+/Wf67V/kfAAAAqijm/okwk0zyv/6//n9O/f+a/r/+v/5/5en/d+f9/3vQ/9f/1//X/6evBq3/H3P/G8NMMsn/AAAAkIOY++8NM5H/AQAAoDJi7p8MM5H/AQAAoDJi7p8KM8kk/+v/6//n1P/3/v/6//r/1af/353+fw/6//r/Vev/F4X+PzfVoPX/Y+7fHWaSSf4HAACAHMTcvyfMRP4HAACAyoi5f2+YifwPAAAAlRFz/74wk0zyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//X7X+v/f/5yYbtP5/zP33hZlkkv8BAAAgBzH37w8zkf8BAACgMmLuPxBmEvJ/p3/XDQAAAKwtMfcfDDPJ5O//9f8r0v//zb9v2bf+v/5/t/33p/+/Qf8/TP3/wVLR/n/70+KG6f/3oP+v/6//r/9PXw1a/z/m/kNhJpnkfwAAAMhBzP1vCjOR/wEAAKAyYu7/6TAT+R8AAAAqI+b+nwkzyST/6/9XpP/fRv9f/7/b/r3/v/5/lVW0/983ler/D+n/6/8P1vHr/+v/s9CL3/+Pf1pa/z/m/sNhJpnkfwAAAMhBzP0/G2Yi/wMAAEBlxNz/5jAT+R8AAAAqI+b+I2EmmeR//X/9f/1//f+V9f/HF+n/v7loN4j9//ri0f+vFv3/7irV//f+//r/A3b8+v/6/yw0aO//H3P/W8JMMsn/AAAAkIOY++8PM5H/AQAAoDJi7n9rmIn8DwAAAJURc//bwkwyyf/6//r/+v/6/97/v/P+9f/XJv3/7vT/e9D/1//X/9f/p68Grf8fc//bw0wyyf8AAACQg5j73xFmIv8DAABAZcTc/84wE/kfAAAAKiPm/neFmWSS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9f/1//X/6atD6/zH3/1yYSSb5HwAAAHIQc/8DYSbyPwAAAFRGzP3vDjOR/wEAAKAyYu5/T5hJJvlf/1//X/9f/1//v/P+9f/XJv3/7vT/e9D/1//X/9f/p68Grf8fc/97w0wyyf8AAACQg5j7fz7MRP4HAACAyoi5/31hJvI/AAAAVEbM/b8QZpJJ/tf/1/8frP7//OXm6+n/6/8X/er/16+k/58F/f/u9P976ND/X6//r/+v/6//zw0btP5/zP3vDzPJJP8DAABADmLu/0CYifwPAAAAlRFz/wfDTOR/AAAAqIyY+x8MM8kk/+v/Z9n/T3d58Pr/3v9f/9/7/+v/r4z+f3f6/z14/3/9f/1//X/6atD6/zH3PxRmkkn+BwAAgBzE3P+hMBP5HwAAACoj5v5fDDOR/wEAAKAyYu7/cJhJJvlf/z/L/v8Av/9/1fr/Iy3rI6f+/1jT45nWpf6//v8q0P/vTv+/B/1//f9B7v+H1bxhkevr/zOIBq3/H3P/R8JMMsn/AAAAkIOY+38pzET+BwAAgMqIuf+Xw0zkfwAAAKiMmPt/Jcwkk/yv/6//r//v/f+9/3/n/ev/r036/93p//eg/6//P8j9/x70/xlEg9b/j7n/V8NMFg1+z/3XEu4mAAAAMEBi7v9omEkmf/8PAAAAOYi5/2iYifwPAAAAlRFz/7Ewk0zyv/5/e/8/vqOq/r/+v/6//r/+/1rUv/7/q24tCv1//X/9f/1//X/9f1Zi0Pr/MfcfDzPJJP8DAABADmLu/7UwE/kfAAAAKiPm/hNhJvI/AAAAVEbM/dNhJpnk/5vY/x8dzP6/9/+/0f7/T/T/9f8D/f/O9P9Xh/f/707/vwf9f/1//X/9f/pq0Pr/MffPhJlkkv8BAACgwtKPg2PuPxlmIv8DAABAZcTcfyrMRP4HAACAyoi5/2NhJpnkf+//r//v/f9vRv9/pGV7/f+S/r/+fz/o/3en/9+D/r/+v/6//j99NWj9/5j7Z8NMMsn/AAAAkIOY+z8eZiL/AwAAQGXE3P+JMBP5HwAAACoj5v7TYSaZ5H/9f/3/3Pv/taK44v3/9f877V//f23S/+9O/78H/X/9f/1//X/6atD6/zH3nwkzyST/AwAAQA5i7j8bZiL/AwAAQGXE3H8uzP9n7z6a5DqrOA43xkor+AisWbGElfkIbNlRxZoimRxskzOYnIPJOedkcs45m5yjiYYqUR6dc6TW9Nw70tzpvvd9n2dzkEpD99htUX/kX91i/wMAAEAzcvffJ25pe/9XjKb/1//33v+vdvL8//Vfr/8/R/+v/5/Cvv7+ys2/7qAo/MD+/053vvoe+n/9v/5/kP5f/6//52Jz6/9z9983bml7/wMAAEBXcvffL26x/wEAAKAZufvvH7fY/wAAANCM3P1Xxy2d7H/9v/5f/6//X+v/b9T/6/+XzfP/h+n/R+j/9f/6f/0/k5pb/5+7/wFxSyf7HwAAAHqQu/+BcYv9DwAAAM3I3f+guMX+BwAAgGbk7n9w3NLJ/tf/6//1/0vp/096/v9F34/+X/+/if5/mP5/hP5f/6//1/8zqbn1/7n7HxK3dLL/AQAAoAe5+x8at9j/AAAA0Izc/Q+LW+x/AAAAaEbu/ofHLQfv/1PH/662R/+v/9f/L6X/39Lz//X/+v+Fu2F1/vcE/f9++v8RI/3/aqX/H3Lofn7zt7ec938A/b/+n/3m1v/n7n9E3HLX1erk5X6TAAAAwKzk7n9k3OLf/wcAAIBm5O6/Jm6x/wEAAKAZufuvjVs62f/6f/2//l//r//f/Pr6/2Xy/P9hR+//73j7e92z3/7f8/+Hef7/1P3/rZ8M/T/LNrf+P3f/dXFLJ/sfAAAAepC7/1Fxi/0PAAAAzcjd/+i4xf4HAACAZuTuf0zc0sn+1/+31v/fdu3rLuj/92oX/b/+X/+v/2+d/n+Y5/+P2Ptt7kz9UP+v/z+O/v/EAV/v+f+0aG79f+7+x8Ytnex/AAAA6EHu/sfFLfY/AAAANCN3/+PjFvsfAAAAmpG7/wlxSyf7X//fWv+//nWe/6//3/T6+n/9f8v0/8P0/yNaef7/ZX5qdt3PH9Wu3//0z//X/7N8c+v/c/c/MW7pZP8DAABAD3L3Pylusf8BAACgGbn7nxy32P8AAADQjNz9T4lbOtn/+n/9/zL6/3wF/b/+//j7/6T/Xyb9/zD9/4hW+v/LtOt+funvX/+v/2e/ufX/ufufGrd0sv8BAACgB7n7nxa32P8AAADQjNz9T49b7H8AAABoRu7+Z8Qtnex//b/+fxn9v+f/6/89/1//fzj6/2H6/xH6f/2//l//z6Tm1v/n7r8+bulk/wMAAEAPcvc/M26x/wEAAKAZufufFbfY/wAAANCM3P3Pjls62f/6f/2//l//r//f/Pr6/2XS/w/T/4/Q/+v/9f/6fyY1o/7/gq86vXpO3NLJ/gcAAIAe5O5/btxi/wMAAEAzcvc/L26x/wEAAKAZufufH7d0sv/1/7Pp//dyvrb6/zOr1Ur/v+q0/z9zwd/P+lzq//X/W6D/H6b/H6H/1//r//X/TGpG/f/ej3P3vyBu6WT/AwAAQA9y978wbrH/AQAAoBm5+18Ut9j/AAAA0Izc/S+OWzrZ//r/2fT/e9rq/z3//+LPR0/9v+f/76f/3w79/zD9/wj9v/5f/6//Z1Jz6/9z978kbjp54rK/RQAAAGBmcve/NG7p5M//AQAAoAe5+18Wt9j/AAAAsFDX7/uZ3P0vj1s62f/6/2n7/5MX/Jz+X/9/8edD/6//1/8fP/3/MP3/CP2//l//r/9nUnPr/3P3vyJu6WT/AwAAQA9y998Qt9j/AAAA0Izc/a+MW+x/AAAAaEbu/lfFLZ3sf/2/5//r//X/+v/Nr6//Xyb9/zD9/wj9v/5/t/3/qfP/Uf9PGy6h/z979uw1x97/5+5/ddzSyf4HAACAHuTuf03cYv8DAABAM3L3vzZusf8BAACgGbn7Xxe3dLL/9f+d9v/5UV9W/3/taqX/1//r//X/w/T/w/T/I/T/+n/P/9f/M6m5Pf8/d//r45ZO9j8AAAD0IHf/G+IW+x8AAACakbv/jXGL/Q8AAADNyN3/prilk/2v/++0//f8f/2//n/b/f8tK/3/Viyi/z9z8OvPvf+/Tv+v/x/QXf9/t7us/VD/r/9nv7n1/7n73xy3dLL/AQAAoAe5+98St9j/AAAA0Izc/W+NW+x/AAAAaEbu/rfFTVd2sv/1//p//b/+X/+/+fW3/Pz/k6vVSv8/gUX0/wPm3v9P8/z/i/8pP0//r/9f8vvX/+v/2W9u/X/u/rfHLZ3sfwAAAOhB7v53xC32PwAAADQjd/874xb7HwAAAJqRu/9dcUsn+1//f9T+/9xnRv+//v71/+v0//F52FX/f90i+n/P/5+I/n/YPPr/g+n/9f9Lfv/6f/0/h7er/j93/7vjlk72PwAAAPQgd/974hb7HwAAAJqRu/+9cYv9DwAAAM3I3f++uKWT/a//9/z/S+n/833q/9vq/0/Nrv8/vfbf18nz//X/E9H/D9P/j9D/6//1/9fr/5nS3J7/n7v//XFLJ/sfAAAAepC7/wNx6/+6tf8BAACgGbn7Pxi32P8AAADQjNz9H4pbOtn/+n/9v+f/6/8P8fz/TR/x5Tz/X//fFf3/MP3/CP2//l//7/n/TGpu/X/u/g/HLZ3sfwAAAOhB7v6PxC32PwAAADQjd/9H4xb7HwAAAJqRu//GuKWT/a//1//r//X/h+j/w7ae/79uG/3/Ffr/Zuj/h22n/z+j/9f/Vz9/m/inQP+v/x/7eto0t/4/d//H4pZO9j8AAAD0IHf/x+MW+x8AAACakbv/E3GL/Q8AAACLdOWGn8vd/8m4pZP9r//X/+v/9f/6/82vr/9fpp30//mh0P97/n/op/+/w9qPlvb8/4v/90v/r/9nenPr/3P3fypu6WT/AwAAQA9y9386brH/AQAAoBm5+z8Tt9j/AAAA0Izc/Z+NWzrZ//p//b/+X/+v/9/8+vr/ZfL8/2H6/xH6/50+P3/p71//r/9nv7n1/7n7Pxe3dLL/AQAAoAe5+z8ft9j/AAAA0Izc/V+IW+x/AAAAaMbe7s+4rMP9r//X/+v/9f/6/82vr/9fJv3/MP3/CP2//l//r/9nUnPr/7+491WnV1+KWzrZ/wAAANCD3P1fjlvsfwAAAGhG7v6vxC32PwAAADQjd/9X45ZO9r/+X/+/jP7/7Nmz1+j/9f/r38/5/v8m/T9F/z9M/z9C/6//1//r/5nU3Pr/3P1fi1s62f8AAADQg9z9X49b7H8AAABoRu7+b8Qt9j8AAAA0I3f/N+OWTva//n8G/f9p/b/n/+v/V57/r/+fiP5/mP5/RIv9/+nDf/u77uePatfvX/+v/2e/ufX/ufu/Fbd0sv8BAACgB7n7vx232P8AAADQjNz934lb7H8AAABoRu7+78Ytnex//f/2+v9b/9r18vz/M6vN71//r//X/+v/j5v+f5j+f0SL/f8l2HU/v/T3r//X/7Pf3Pr/3P3fi1vWh9+JS/suAQAAgDnJ3f/9uKWTP/8HAACAHuTu/0HcYv8DAABAM3L3/zBu6WT/6/9n8Pz/Bvt/z//f/PnQ/8+6/79C/98G/f8w/f8I/b/+X/8/Uf+fn2b9f+/m1v/n7v9R3NLJ/gcAAIAe5O7/cdxi/wMAAEAzcvf/JG6x/wEAAKAZuftvilsu2P+b2u5W6P/1//p//b/+f/Pr6/+XSf8/7LD9/6nV0fr/pP/X/+v/e+3/Pf+fc46x/7/36jL6/9z9P41b/Pk/AAAALM6JA34+d//P4hb7HwAAAJqRu//ncYv9DwAAAM3I3f+LuOXmK3b1lrZK/6//1//r//X/m19f/79M+v9hnv8/Qv8/RT9/lf6/jf5/tdL/c3TH2P/vudT+P3f/L+MWf/4PAAAAzcjd/6u4xf4HAACAZuTu/3XcYv8DAABAM3L3/yZu6WT/6//1/0fs//fSTP3/Ofr/c/T/m+n/t0P/P0z/P0L/7/n/+n/P/2dSc+v/c/f/Nm7pZP8DAABAD3L3/y5usf8BAACgGbn7fx+32P8AAADQjNz9f4hbOtn/O+v/4y+1/n/x/b/n/+v/9f/6/1nR/w/T/4/Q/+v/9f/6fyY1t/4/d/8f45ZO9j8AAAD0IHf/n+IW+x8AAACakbv/z3GL/Q8AAADNyN3/l7ilk/3v+f/6f/2//l//v/n19f/LpP8fpv/frP5G6f/1//p//T+Tmlv/n7v/r3FLJ/sfAAAAepC7/29xi/0PAAAAzcjdf3PcYv8DAABAM3L3/z1u6WT/6//1//p//b/+f/Pr6/+XSf8/bJf9/91vN/6ynv+/8/4/34L+X/+v/2cSc+v/c/f/I27pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/I/3/qfqF+v9B+v/196//3/z50P/r//X/x++y+vsLPnT6/9DZ8/+L/t/z//X/+n8mNbf+P3f/f+KWTvY/AAAA9CB3/y1xi/0PAAAAzcjd/9+4xf4HAACAZuTu/1/c0sn+9/z/JfX/V+n/9f/6f/2//n+E5/8P0/+P0P/r//X/+n8mNbf+P3f//wMAAP//I6JSVQ==") mkdir(&(0x7f0000000000)='./control\x00', 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) r3 = open(0x0, 0x0, 0x140) lseek(r3, 0x8, 0x0) getdents64(r3, 0x0, 0x0) fchdir(r0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000002b80), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, 0x0) syncfs(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0x980929, 0x1}) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) 48.835072188s ago: executing program 1 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgid(0xee00) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xfffb}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x100010, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$eJzs3cFvHFcdB/DvrNeOt1TBaROaQxFWIhWkiMSJlUK4YBBCOVSoKoeercRprG6SKnFRWiFIAcEJiUP/gILkGweExD0oXLiUW68+VkLiEiEU9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn42qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9La/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuPJf8p55tJoZrMt95J/JJk57Hj3oBi18P7k4wAAAICnMvsE23z5UR7lbo726p2ifM2fr1Svl2fzfm5mLatZSzsruVq/hi5f9Tc21hfbG+uLN8qprA/3+71/7SmMmbqHqao2as8nqzVauZbVasnZXKmCuZpGd9+nk5O9eAbiGvBRGVPx3dqYkTXrtJY7+91O7yLsi+G3IhqPWbO1GVzSz8hCHVu55bFuBorqjZpkayZ2PTvNodpc1et0f0/n0+i/83P8AHL+Qj0vj+fXB5rzvepnopEqExd6o6+8Zh6fieTrf/nj29fbN9+9fu3OmWfnkHYxtcPyrWNicSATrzzXmWjucf2FKhMn+vXL+WF+nDOZz5u5ndX8JMtZy0o6dftyPZ7Ln3OPz9TSUO3N3SKZqc9L95yNE9N8flCVlnOq2vZoVlPkVq5mJa9X/y7kfL6Vi7mYSwNn+MSOcVfHVl31ja1Xfe9M/3Vk8Ke/URfKu9tvNu9yS4874p1G537p3vvLvB4byGt31D/sr3Vs4DpYGMjSS73sTI/sfG/3xi1vtZf7+OUuz4nJmqszUV5AvadEL7qXu5loVs+i7eP8951yu7RvdjrXl9/bof97W+qv1fNyWK1/dbe1e0afiv1VnqqXMlvfSYZHR9n2cv8uM9DW2RzL3bbhJ2653YmqrSh6V+qPcqsaANuv1Jn6d7jtPV2o2l4Z2bZYtZ0caBv6fSu30s7VCeQPgCfx97f7xbm8MNP6Z+vT1ietX7Wut96Y/f6Rbx95dSbTf5v+TnNh6rXGq8Wf80l+tvn6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHJ3Pvjw3eV2e+X26EJj56ahQitbl+zU85HR/RT1F/qMsa/nojCbZGhJ9T1HEw+jtTWMbYXOz5OJ56f3nVaj1/ltWWhuG1GjCktDS/60vcOP9hhhMd51cYCFRia706mMHgCHeFMCJuLc2o33zt354MNvrt5YfmflnZWb0xcvXlq4dPH1xXPXVtsrC92fhx0lcBA2H/qHHQkAAAAAAAAAAAAwrlEfDDj14m4fGhnrMx7+ZyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwLy6fSfN+ipxfOLtQ1jfWF9vl1CtvrtlM0mgkxU+T4kGylO6UuYHuivzhQToj9vPx6qW3Pnu48flmX83u+kmjnu/s8a1J7tVT5pNM1fOnMNTflafur/h37xjKhH3R6XSWni4+2B//DQAA//9KkvWS") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000000)='./file1\x00', 0x189042, 0x0) rename(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000040)='./bus\x00') 46.119113958s ago: executing program 1 (id=455): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000008", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000400)={0x3, 0x200, 0x3, 0x0, 0xc}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) unshare(0x8040480) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, 0x0) r2 = io_uring_setup(0x497c, &(0x7f00000001c0)) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 8.518255777s ago: executing program 3 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x30) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a], [{}, {0x0, 0xffffffff}, {0x8}], 0x10}) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa1b, &(0x7f0000001540)="$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") clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000340)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0603d0f, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 7.485467355s ago: executing program 3 (id=494): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) socket$key(0xf, 0x3, 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2500, 0x0) 6.090498683s ago: executing program 3 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x301880, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)='`', 0xca, 0xf00, &(0x7f0000000240)={0x6, 0x0, r5, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYRESHEX]) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r9, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@fscache}]}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x284}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x11}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5.42638771s ago: executing program 2 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x3, 0x20000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) 4.143027209s ago: executing program 2 (id=497): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") chroot(0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000580)=""/190, 0xbe) setgroups(0x1e2, &(0x7f0000000100)) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 3.005399345s ago: executing program 2 (id=498): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x0) dup(r0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001800), 0xc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5761, 0x1000000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000e9d89d5f27a4030000000000000105000000080000000000000000000085000000000000e1c8aa0a99d73b8ca7c00ebbadb47e8ad94b1e8f96fed2895d"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000002580)=0x5, 0x6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) 2.58892364s ago: executing program 2 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mknod$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x40101287, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)=0x9) syz_emit_vhci(0x0, 0x22) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=r6], 0xd) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0', [{0x20, '#! '}, {0x20, '}\\\'*:+:#:(!^\\&'}], 0xa, "e0afe977fa63a83971dd85920b54812dddc03734708ed78609e6d60000937a02ef876b20357f000000fccb1525"}, 0x4b) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x4, [{0x670, 0x5}, {0x200, 0x1}, {0x0, 0x6}, {0xea, 0x83}]}}) 1.450973697s ago: executing program 2 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f00000001c0)=[0x4, 0x265], 0x2) 1.378875583s ago: executing program 3 (id=501): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f00000001c0)=[0x4, 0x265], 0x2) 476.845029ms ago: executing program 3 (id=502): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x2}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0x211, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0x16}}, 0x1c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0xfff) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @fastopen={0x22, 0x10, "4d4cdbc682e494b37e0671599398"}]}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}, 0x1, 0x8}, 0x0) 238.90533ms ago: executing program 2 (id=503): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$revoke(0x6, 0x0) socket$inet6(0xa, 0x4, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000340)='}', 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x80047456, 0xfffffffffffffffe) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x24, 0x9, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000214e224e0000", 0x58}], 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) 0s ago: executing program 3 (id=504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000000f27023896f5e432ba60f8a911a15"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1cdb, r0, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=[{0x5, 0x4, 0xb, 0x4}, {0x1, 0x5, 0x4, 0x6}, {0x0, 0x5, 0x1, 0x8}, {0x3, 0x2, 0x6}, {0x5, 0x2, 0xd, 0xb}, {0x2, 0x3, 0x3, 0x7}, {0x3, 0x3, 0x7, 0xb}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0x4, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r2, 0xef784000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000140)="170000000000020000ffbe8c2ee1768814002b000203000afdff020657fc5ad90200bb6a880000d6c9db0000db0000eb00df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd30500000000", 0xb8) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="a548", 0x2}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x4001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [], [0x0, 0x0, 0x0, 0x8], 0x0, [0x1]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, 'Q\x00\x00\x00'}]}, 0x54}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x64, 0x2}, @cond}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2778) kernel console output (not intermixed with test programs): beyond EOD, truncated [ 300.618088][ T3094] loop2: p47 size 108986237 extends beyond EOD, truncated [ 300.636449][ T3094] loop2: p48 size 520093696 extends beyond EOD, truncated [ 300.644774][ T3094] loop2: p49 size 108986237 extends beyond EOD, truncated [ 300.677210][ T3094] loop2: p50 size 520093696 extends beyond EOD, truncated [ 300.693743][ T3982] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.731600][ T3094] loop2: p51 size 108986237 extends beyond EOD, truncated [ 300.801434][ T3094] loop2: p52 size 520093696 extends beyond EOD, truncated [ 300.814007][ T3982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.833580][ T3982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.172261][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.191476][ T3094] loop2: p53 size 108986237 extends beyond EOD, truncated [ 303.258273][ T3094] loop2: p54 size 520093696 extends beyond EOD, truncated [ 303.300202][ T3094] loop2: p55 size 108986237 extends beyond EOD, truncated [ 303.315759][ T3094] loop2: p56 size 520093696 extends beyond EOD, truncated [ 303.346368][ T3094] loop2: p57 size 108986237 extends beyond EOD, truncated [ 303.356341][ T3094] loop2: p58 size 520093696 extends beyond EOD, truncated [ 303.376083][ T3094] loop2: p59 size 108986237 extends beyond EOD, truncated [ 304.455695][ T3094] loop2: p60 size 520093696 extends beyond EOD, truncated [ 304.488018][ T3094] loop2: p61 size 108986237 extends beyond EOD, truncated [ 304.520528][ T3094] loop2: p62 size 520093696 extends beyond EOD, truncated [ 304.534811][ T3094] loop2: p63 size 108986237 extends beyond EOD, truncated [ 304.544955][ T5405] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 304.557510][ T3094] loop2: p64 size 520093696 extends beyond EOD, truncated [ 304.584420][ T3094] loop2: p65 size 108986237 extends beyond EOD, truncated [ 304.601021][ T3094] loop2: p66 size 520093696 extends beyond EOD, truncated [ 304.618705][ T3094] loop2: p67 size 108986237 extends beyond EOD, truncated [ 304.628014][ T3094] loop2: p68 size 520093696 extends beyond EOD, truncated [ 304.636849][ T3094] loop2: p69 size 108986237 extends beyond EOD, truncated [ 304.646107][ T3094] loop2: p70 size 520093696 extends beyond EOD, truncated [ 304.654706][ T3094] loop2: p71 size 108986237 extends beyond EOD, truncated [ 304.668615][ T3094] loop2: p72 size 520093696 extends beyond EOD, truncated [ 304.680533][ T3094] loop2: p73 size 108986237 extends beyond EOD, truncated [ 304.689044][ T3094] loop2: p74 size 520093696 extends beyond EOD, truncated [ 304.701014][ T3094] loop2: p75 size 108986237 extends beyond EOD, truncated [ 304.709661][ T3094] loop2: p76 size 520093696 extends beyond EOD, truncated [ 304.719752][ T3094] loop2: p77 size 108986237 extends beyond EOD, truncated [ 304.728265][ T3094] loop2: p78 size 520093696 extends beyond EOD, truncated [ 304.737592][ T3094] loop2: p79 size 108986237 extends beyond EOD, truncated [ 304.761881][ T5414] loop4: detected capacity change from 0 to 164 [ 304.763853][ T3094] loop2: p80 size 520093696 extends beyond EOD, truncated [ 304.782700][ T3094] loop2: p81 size 108986237 extends beyond EOD, truncated [ 304.798987][ T3094] loop2: p82 size 520093696 extends beyond EOD, truncated [ 304.810270][ T3094] loop2: p83 size 108986237 extends beyond EOD, truncated [ 304.830005][ T3094] loop2: p84 size 520093696 extends beyond EOD, truncated [ 304.842476][ T3094] loop2: p85 size 108986237 extends beyond EOD, truncated [ 304.858979][ T3094] loop2: p86 size 520093696 extends beyond EOD, truncated [ 304.870021][ T3094] loop2: p87 size 108986237 extends beyond EOD, truncated [ 304.898023][ T3094] loop2: p88 size 520093696 extends beyond EOD, truncated [ 304.940985][ T3094] loop2: p89 size 108986237 extends beyond EOD, truncated [ 304.972914][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 304.999957][ T3094] loop2: p90 size 520093696 extends beyond EOD, truncated [ 305.008665][ T3094] loop2: p91 size 108986237 extends beyond EOD, truncated [ 305.026121][ T3094] loop2: p92 size 520093696 extends beyond EOD, truncated [ 305.040719][ T3094] loop2: p93 size 108986237 extends beyond EOD, truncated [ 305.784248][ T3094] loop2: p94 size 520093696 extends beyond EOD, truncated [ 305.794961][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 305.897242][ T3094] loop2: p95 size 108986237 extends beyond EOD, truncated [ 305.926677][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 306.004346][ T5423] "syz.4.281" (5423) uses obsolete ecb(arc4) skcipher [ 306.026993][ T3094] loop2: p96 size 520093696 extends beyond EOD, truncated [ 306.042035][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 306.056007][ T3094] loop2: p97 size 108986237 extends beyond EOD, truncated [ 306.071241][ T3094] loop2: p98 size 520093696 extends beyond EOD, truncated [ 306.079868][ T22] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 306.094582][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.106908][ T3094] loop2: p99 size 108986237 extends beyond EOD, truncated [ 306.133992][ T3094] loop2: p100 size 520093696 extends beyond EOD, truncated [ 306.155816][ T22] usb 1-1: config 0 descriptor?? [ 306.322985][ T3094] loop2: p101 size 108986237 extends beyond EOD, truncated [ 306.515481][ T3094] loop2: p102 size 520093696 extends beyond EOD, truncated [ 306.532565][ T3094] loop2: p103 size 108986237 extends beyond EOD, truncated [ 306.561403][ T3094] loop2: p104 size 520093696 extends beyond EOD, truncated [ 306.625618][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 306.631685][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 306.639838][ T3094] loop2: p105 size 108986237 extends beyond EOD, truncated [ 306.649418][ T22] usb 1-1: USB disconnect, device number 4 [ 306.656614][ T3094] loop2: p106 size 520093696 extends beyond EOD, truncated [ 306.709856][ T3094] loop2: p107 size 108986237 extends beyond EOD, truncated [ 306.736962][ T3094] loop2: p108 size 520093696 extends beyond EOD, truncated [ 306.745737][ T3094] loop2: p109 size 108986237 extends beyond EOD, truncated [ 306.763243][ T3094] loop2: p110 size 520093696 extends beyond EOD, truncated [ 306.781700][ T3094] loop2: p111 size 108986237 extends beyond EOD, truncated [ 306.799390][ T3094] loop2: p112 size 520093696 extends beyond EOD, truncated [ 306.815992][ T3094] loop2: p113 size 108986237 extends beyond EOD, truncated [ 307.003040][ T3094] loop2: p114 size 520093696 extends beyond EOD, truncated [ 307.054667][ T3094] loop2: p115 size 108986237 extends beyond EOD, truncated [ 307.072449][ T3094] loop2: p116 size 520093696 extends beyond EOD, truncated [ 307.130349][ T5434] input: syz0 as /devices/virtual/input/input8 [ 307.231722][ T3094] loop2: p117 size 108986237 extends beyond EOD, truncated [ 307.526995][ T3094] loop2: p118 size 520093696 extends beyond EOD, truncated [ 307.570496][ T3094] loop2: p119 size 108986237 extends beyond EOD, truncated [ 307.579169][ T3094] loop2: p120 size 520093696 extends beyond EOD, truncated [ 307.598989][ T5433] loop3: detected capacity change from 0 to 1024 [ 307.652589][ T5433] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 307.662817][ T3094] loop2: p121 size 108986237 extends beyond EOD, truncated [ 307.680870][ T3094] loop2: p122 size 520093696 extends beyond EOD, truncated [ 307.716738][ T3094] loop2: p123 size 108986237 extends beyond EOD, truncated [ 307.735872][ T3094] loop2: p124 size 520093696 extends beyond EOD, truncated [ 307.932408][ T3094] loop2: p125 size 108986237 extends beyond EOD, truncated [ 308.081073][ T5447] overlayfs: failed to resolve './file0': -2 [ 308.258057][ T3094] loop2: p126 size 520093696 extends beyond EOD, truncated [ 308.818379][ T3094] loop2: p127 size 108986237 extends beyond EOD, truncated [ 308.850343][ T3094] loop2: p128 size 520093696 extends beyond EOD, truncated [ 308.875700][ T3094] loop2: p129 size 108986237 extends beyond EOD, truncated [ 308.905770][ T3094] loop2: p130 size 520093696 extends beyond EOD, truncated [ 308.921875][ T3094] loop2: p131 size 108986237 extends beyond EOD, truncated [ 308.956519][ T3094] loop2: p132 size 520093696 extends beyond EOD, truncated [ 308.985694][ T3094] loop2: p133 size 108986237 extends beyond EOD, truncated [ 308.997280][ T3094] loop2: p134 size 520093696 extends beyond EOD, truncated [ 309.025704][ T3094] loop2: p135 size 108986237 extends beyond EOD, truncated [ 309.045712][ T3094] loop2: p136 size 520093696 extends beyond EOD, truncated [ 309.065702][ T3094] loop2: p137 size 108986237 extends beyond EOD, truncated [ 309.084061][ T3094] loop2: p138 size 520093696 extends beyond EOD, truncated [ 309.101281][ T3094] loop2: p139 size 108986237 extends beyond EOD, truncated [ 309.123145][ T3094] loop2: p140 size 520093696 extends beyond EOD, truncated [ 309.143191][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.154686][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.163105][ T3094] loop2: p141 size 108986237 extends beyond EOD, truncated [ 309.170832][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.179857][ T3094] loop2: p142 size 520093696 extends beyond EOD, truncated [ 309.179883][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.195001][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.199360][ T3094] loop2: p143 size 108986237 extends beyond EOD, truncated [ 309.205285][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.217240][ T3094] loop2: p144 size 520093696 extends beyond EOD, truncated [ 309.232476][ T3094] loop2: p145 size 108986237 extends beyond EOD, truncated [ 309.263845][ T3094] loop2: p146 size 520093696 extends beyond EOD, truncated [ 309.272584][ T3094] loop2: p147 size 108986237 extends beyond EOD, truncated [ 309.288487][ T3094] loop2: p148 size 520093696 extends beyond EOD, truncated [ 309.302808][ T3094] loop2: p149 size 108986237 extends beyond EOD, truncated [ 309.316548][ T3094] loop2: p150 size 520093696 extends beyond EOD, truncated [ 309.335679][ T3094] loop2: p151 size 108986237 extends beyond EOD, truncated [ 309.355688][ T3094] loop2: p152 size 520093696 extends beyond EOD, truncated [ 309.366211][ T3094] loop2: p153 size 108986237 extends beyond EOD, truncated [ 309.376446][ T3094] loop2: p154 size 520093696 extends beyond EOD, truncated [ 309.406036][ T3094] loop2: p155 size 108986237 extends beyond EOD, truncated [ 309.425729][ T3094] loop2: p156 size 520093696 extends beyond EOD, truncated [ 309.437720][ T3094] loop2: p157 size 108986237 extends beyond EOD, truncated [ 309.461411][ T3094] loop2: p158 size 520093696 extends beyond EOD, truncated [ 309.463870][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 309.489862][ T3094] loop2: p159 size 108986237 extends beyond EOD, truncated [ 309.634254][ T3094] loop2: p160 size 520093696 extends beyond EOD, truncated [ 309.652602][ T3094] loop2: p161 size 108986237 extends beyond EOD, truncated [ 309.681394][ T3094] loop2: p162 size 520093696 extends beyond EOD, truncated [ 309.694977][ T3094] loop2: p163 size 108986237 extends beyond EOD, truncated [ 311.248128][ T47] Bluetooth: hci3: command tx timeout [ 311.952972][ T3094] loop2: p164 size 520093696 extends beyond EOD, truncated [ 312.204217][ T3094] loop2: p165 size 108986237 extends beyond EOD, truncated [ 312.239711][ T3094] loop2: p166 size 520093696 extends beyond EOD, truncated [ 312.248601][ T3094] loop2: p167 size 108986237 extends beyond EOD, truncated [ 312.257215][ T3094] loop2: p168 size 520093696 extends beyond EOD, truncated [ 312.265914][ T3094] loop2: p169 size 108986237 extends beyond EOD, truncated [ 312.274189][ T3094] loop2: p170 size 520093696 extends beyond EOD, truncated [ 312.284292][ T3094] loop2: p171 size 108986237 extends beyond EOD, truncated [ 312.298163][ T3094] loop2: p172 size 520093696 extends beyond EOD, truncated [ 312.312291][ T3094] loop2: p173 size 108986237 extends beyond EOD, truncated [ 312.326728][ T3094] loop2: p174 size 520093696 extends beyond EOD, truncated [ 312.339516][ T3094] loop2: p175 size 108986237 extends beyond EOD, truncated [ 313.193201][ T3094] loop2: p176 size 520093696 extends beyond EOD, truncated [ 313.316918][ T47] Bluetooth: hci3: command tx timeout [ 313.323731][ T3094] loop2: p177 size 108986237 extends beyond EOD, truncated [ 313.355622][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.362873][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.391531][ T3094] loop2: p178 size 520093696 extends beyond EOD, truncated [ 313.402749][ T3094] loop2: p179 size 108986237 extends beyond EOD, truncated [ 313.406883][ T5454] device bridge_slave_0 entered promiscuous mode [ 313.420565][ T3094] loop2: p180 size 520093696 extends beyond EOD, truncated [ 313.433294][ T3094] loop2: p181 size 108986237 extends beyond EOD, truncated [ 313.451531][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.464764][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.473475][ T5454] device bridge_slave_1 entered promiscuous mode [ 313.613426][ T3094] loop2: p182 size 520093696 extends beyond EOD, truncated [ 313.625363][ T5488] fuse: Unknown parameter 'f0x000000000000000600000000000000000000' [ 313.648804][ T3094] loop2: p183 size 108986237 extends beyond EOD, truncated [ 314.247538][ T3094] loop2: p184 size 520093696 extends beyond EOD, truncated [ 314.620443][ T3094] loop2: p185 size 108986237 extends beyond EOD, truncated [ 314.630372][ T3094] loop2: p186 size 520093696 extends beyond EOD, truncated [ 314.635199][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.659160][ T3094] loop2: p187 size 108986237 extends beyond EOD, truncated [ 314.661218][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.697130][ T3094] loop2: p188 size 520093696 extends beyond EOD, truncated [ 314.714455][ T3094] loop2: p189 size 108986237 extends beyond EOD, truncated [ 314.743508][ T3094] loop2: p190 size 520093696 extends beyond EOD, truncated [ 314.762868][ T3094] loop2: p191 size 108986237 extends beyond EOD, truncated [ 314.782291][ T5454] team0: Port device team_slave_0 added [ 314.789949][ T3094] loop2: p192 size 520093696 extends beyond EOD, truncated [ 314.807545][ T3094] loop2: p193 size 108986237 extends beyond EOD, truncated [ 314.855963][ T3094] loop2: p194 size 520093696 extends beyond EOD, truncated [ 314.876877][ T5454] team0: Port device team_slave_1 added [ 314.890629][ T3094] loop2: p195 size 108986237 extends beyond EOD, truncated [ 315.089917][ T3094] loop2: p196 size 520093696 extends beyond EOD, truncated [ 315.122104][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.129272][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.897031][ T47] Bluetooth: hci3: command tx timeout [ 315.904832][ T3094] loop2: p197 size 108986237 extends beyond EOD, truncated [ 315.986246][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.011779][ T3094] loop2: p198 size 520093696 extends beyond EOD, truncated [ 316.185233][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.209560][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.278004][ T5515] I/O error, dev loop128, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 316.293930][ T5515] hub 6-0:1.0: USB hub found [ 316.298939][ T5515] hub 6-0:1.0: 1 port detected [ 316.729502][ T3094] loop2: p199 size 108986237 extends beyond EOD, truncated [ 316.730694][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.745275][ T3094] loop2: p200 size 520093696 extends beyond EOD, truncated [ 316.823062][ T3094] loop2: p201 size 108986237 extends beyond EOD, truncated [ 316.863827][ T3094] loop2: p202 size 520093696 extends beyond EOD, truncated [ 316.893953][ T3094] loop2: p203 size 108986237 extends beyond EOD, truncated [ 316.930860][ T5454] device hsr_slave_0 entered promiscuous mode [ 316.955089][ T3094] loop2: p204 size 520093696 extends beyond EOD, truncated [ 316.977471][ T5454] device hsr_slave_1 entered promiscuous mode [ 316.988520][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.003838][ T3094] loop2: p205 size 108986237 extends beyond EOD, truncated [ 317.005524][ T5454] Cannot create hsr debugfs directory [ 317.070316][ T3094] loop2: p206 size 520093696 extends beyond EOD, truncated [ 317.099441][ T3094] loop2: p207 size 108986237 extends beyond EOD, truncated [ 317.128571][ T3094] loop2: p208 size 520093696 extends beyond EOD, truncated [ 317.236253][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242599][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.316964][ T3094] loop2: p209 size 108986237 extends beyond EOD, truncated [ 317.343506][ T3094] loop2: p210 size 520093696 extends beyond EOD, truncated [ 317.351389][ T4788] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 317.956087][ T47] Bluetooth: hci3: command tx timeout [ 318.145781][ T3094] loop2: p211 size 108986237 extends beyond EOD, truncated [ 318.186063][ T3094] loop2: p212 size 520093696 extends beyond EOD, truncated [ 318.209083][ T3094] loop2: p213 size 108986237 extends beyond EOD, truncated [ 318.233787][ T3094] loop2: p214 size 520093696 extends beyond EOD, truncated [ 318.253267][ T3094] loop2: p215 size 108986237 extends beyond EOD, truncated [ 318.282487][ T3094] loop2: p216 size 520093696 extends beyond EOD, truncated [ 318.359463][ T3094] loop2: p217 size 108986237 extends beyond EOD, truncated [ 318.394007][ T3094] loop2: p218 size 520093696 extends beyond EOD, truncated [ 318.473428][ T5454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.509422][ T3094] loop2: p219 size 108986237 extends beyond EOD, truncated [ 318.543815][ T3094] loop2: p220 size 520093696 extends beyond EOD, truncated [ 318.572130][ T3094] loop2: p221 size 108986237 extends beyond EOD, truncated [ 318.635512][ T4788] usb 1-1: Using ep0 maxpacket: 16 [ 318.639847][ T3094] loop2: p222 size 520093696 extends beyond EOD, truncated [ 318.672482][ T3094] loop2: p223 size 108986237 extends beyond EOD, truncated [ 318.779922][ T3094] loop2: p224 size 520093696 extends beyond EOD, truncated [ 318.810114][ T3094] loop2: p225 size 108986237 extends beyond EOD, truncated [ 318.823030][ T5454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.515021][ T5528] loop3: detected capacity change from 0 to 512 [ 319.521879][ T3094] loop2: p226 size 520093696 extends beyond EOD, truncated [ 319.555727][ T3094] loop2: p227 size 108986237 extends beyond EOD, truncated [ 319.615512][ T3094] loop2: p228 size 520093696 extends beyond EOD, [ 319.615673][ T4788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.633600][ T4788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.652377][ T4788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.665055][ T3094] truncated [ 319.682184][ T5528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 319.694211][ T3094] loop2: p229 size 108986237 extends beyond EOD, truncated [ 319.707563][ T3094] loop2: p230 size 520093696 extends beyond EOD, truncated [ 319.715792][ T5528] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 319.722052][ T3094] loop2: p231 size 108986237 extends beyond EOD, truncated [ 319.739763][ T3094] loop2: p232 size 520093696 extends beyond EOD, truncated [ 319.744456][ T4788] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 319.748265][ T3094] loop2: p233 size 108986237 extends beyond EOD, truncated [ 319.777266][ T3094] loop2: p234 size 520093696 extends beyond EOD, truncated [ 319.786181][ T3094] loop2: p235 size 108986237 extends beyond EOD, truncated [ 319.796504][ T3094] loop2: p236 size 520093696 extends beyond EOD, truncated [ 319.816664][ T3094] loop2: p237 size 108986237 extends beyond EOD, truncated [ 319.819378][ T4788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.825110][ T3094] loop2: p238 size 520093696 extends beyond EOD, truncated [ 319.844275][ T3094] loop2: p239 size 108986237 extends beyond EOD, truncated [ 319.852477][ T3094] loop2: p240 size 520093696 extends beyond EOD, truncated [ 319.862509][ T5530] EXT4-fs error (device loop3): ext4_generic_delete_entry:2727: inode #2: block 3: comm syz.3.308: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 319.882844][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.889334][ T3094] loop2: p241 size 108986237 extends beyond EOD, truncated [ 319.904635][ T3094] loop2: p242 size 520093696 extends beyond EOD, truncated [ 319.912998][ T5530] EXT4-fs error (device loop3) in ext4_delete_entry:2798: Corrupt filesystem [ 319.922824][ T3094] loop2: p243 size 108986237 extends beyond EOD, truncated [ 319.932366][ T5530] EXT4-fs warning (device loop3): ext4_rename_delete:3776: inode #2: comm syz.3.308: Deleting old file: nlink 4, error=-117 [ 319.951932][ T3094] loop2: p244 size 520093696 extends beyond EOD, truncated [ 319.961627][ T3094] loop2: p245 size 108986237 extends beyond EOD, truncated [ 319.970843][ T3094] loop2: p246 size 520093696 extends beyond EOD, truncated [ 319.972846][ T4788] usb 1-1: config 0 descriptor?? [ 319.979363][ T3094] loop2: p247 size 108986237 extends beyond EOD, truncated [ 319.998291][ T5528] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 320.014138][ T3094] loop2: p248 size 520093696 extends beyond EOD, truncated [ 320.041059][ T3094] loop2: p249 size 108986237 extends beyond EOD, truncated [ 320.052376][ T3094] loop2: p250 size 520093696 extends beyond EOD, truncated [ 320.071218][ T3094] loop2: p251 size 108986237 extends beyond EOD, truncated [ 320.099875][ T3094] loop2: p252 size 520093696 extends beyond EOD, truncated [ 320.110521][ T5454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.129816][ T3094] loop2: p253 size 108986237 extends beyond EOD, truncated [ 320.133505][ T4788] usb 1-1: can't set config #0, error -71 [ 320.165812][ T3094] loop2: p254 size 520093696 extends beyond EOD, truncated [ 320.195258][ T4788] usb 1-1: USB disconnect, device number 5 [ 320.198759][ T3094] loop2: p255 size 108986237 extends beyond EOD, truncated [ 321.223161][ T5454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.239580][ T5029] EXT4-fs (loop3): unmounting filesystem. [ 322.413367][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 323.641516][ T5454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.874779][ T5454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.258023][ T5454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.472097][ T5454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.731557][ T5561] tmpfs: Bad value for 'mpol' [ 330.149340][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.250706][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.325186][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.344214][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.429792][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.467121][ T3653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.629769][ T3653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.639633][ T3653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.649946][ T3653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.659343][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.667948][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.275915][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.356208][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.363375][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.207106][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.225234][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.273588][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.280810][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.348536][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.195652][ T47] Bluetooth: hci1: command tx timeout [ 335.728115][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.818407][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.933397][ T5454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.989441][ T5454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.024225][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.048368][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.069910][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.089524][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.106262][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.114987][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.134583][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.148321][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.266917][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.276012][ T47] Bluetooth: hci1: command tx timeout [ 336.299975][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.065581][ T3962] device hsr_slave_0 left promiscuous mode [ 337.076478][ T3962] device hsr_slave_1 left promiscuous mode [ 337.095967][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.103878][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.139490][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.168824][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.365320][ T3962] device bridge_slave_1 left promiscuous mode [ 338.458864][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.643727][ T3962] device bridge_slave_0 left promiscuous mode [ 338.746844][ T47] Bluetooth: hci1: command tx timeout [ 338.757189][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.891337][ T3962] device veth1_macvtap left promiscuous mode [ 338.970791][ T3962] device veth0_macvtap left promiscuous mode [ 339.024747][ T3962] device veth1_vlan left promiscuous mode [ 339.121147][ T3962] device veth0_vlan left promiscuous mode [ 342.549795][ T5637] loop3: detected capacity change from 0 to 512 [ 343.445663][ T3653] Bluetooth: hci1: command tx timeout [ 343.556050][ T5637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 343.565059][ T5637] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 343.946609][ T5029] EXT4-fs (loop3): unmounting filesystem. [ 347.470294][ T5665] loop3: detected capacity change from 0 to 16 [ 347.481225][ T5665] erofs: (device loop3): mounted with root inode @ nid 36. [ 347.667373][ T5667] syz.3.335: attempt to access beyond end of device [ 347.667373][ T5667] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 348.381662][ T3962] team0 (unregistering): Port device team_slave_1 removed [ 348.906144][ T3962] team0 (unregistering): Port device team_slave_0 removed [ 349.138784][ T5645] udevd[5645]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 349.177030][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.192362][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.200806][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.211304][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.220468][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.228087][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.361966][ T3962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.475891][ T3962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.098712][ T3962] bond0 (unregistering): Released all slaves [ 350.182267][ T5578] chnl_net:caif_netlink_parms(): no params data found [ 350.194453][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.203751][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.500391][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.588101][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.595272][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.614247][ T5578] device bridge_slave_0 entered promiscuous mode [ 350.676788][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.683923][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.697129][ T5578] device bridge_slave_1 entered promiscuous mode [ 350.729448][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.753361][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.769872][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.785123][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.831675][ T5578] team0: Port device team_slave_0 added [ 350.861469][ T5578] team0: Port device team_slave_1 added [ 350.883510][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 350.892103][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.923898][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.933570][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.957442][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.964434][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.990560][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.030144][ T5454] device veth0_vlan entered promiscuous mode [ 351.038541][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.046787][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.073046][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.140405][ T5454] device veth1_vlan entered promiscuous mode [ 351.152142][ T5578] device hsr_slave_0 entered promiscuous mode [ 351.160604][ T5578] device hsr_slave_1 entered promiscuous mode [ 351.167580][ T5578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.175181][ T5578] Cannot create hsr debugfs directory [ 351.222021][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.230699][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.240317][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.250024][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.306132][ T5454] device veth0_macvtap entered promiscuous mode [ 351.313912][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 351.325822][ T3653] Bluetooth: hci0: command tx timeout [ 351.358412][ T5454] device veth1_macvtap entered promiscuous mode [ 351.484980][ T5578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.499690][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.510295][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.518417][ T5668] device bridge_slave_0 entered promiscuous mode [ 351.527613][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.538256][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.550643][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.561724][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.572676][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.583727][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.595665][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.607230][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.617871][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.628708][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.639668][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.650941][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.661702][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.672563][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.683410][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.696208][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.703754][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.711834][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.721486][ T5668] device bridge_slave_1 entered promiscuous mode [ 351.745095][ T5578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.758674][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.767137][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.776593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.786208][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.794868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.834044][ T3962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.853071][ T5454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.862161][ T5454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.871610][ T5454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.880491][ T5454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.927483][ T5578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.958171][ T3962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.005348][ T5578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.022614][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.037250][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.067698][ T3962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.138912][ T5668] team0: Port device team_slave_0 added [ 352.180802][ T5668] team0: Port device team_slave_1 added [ 352.232971][ T3962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.253105][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.261663][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.292742][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.322931][ T3951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.331985][ T3951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.354874][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.366773][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.393203][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.409292][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.494643][ T5668] device hsr_slave_0 entered promiscuous mode [ 352.501866][ T5668] device hsr_slave_1 entered promiscuous mode [ 352.509411][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.517571][ T5668] Cannot create hsr debugfs directory [ 352.536584][ T5578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.568327][ T5578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.576390][ T3824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.584674][ T3824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.595362][ T5578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.608831][ T5578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.635925][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.743515][ T3962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.920952][ T3962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.127977][ T3962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.231665][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.308709][ T3962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.359658][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.389283][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.402013][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.405715][ T3649] Bluetooth: hci0: command tx timeout [ 353.419691][ T3649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.427887][ T3649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 353.435350][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.542009][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.553897][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.609602][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.663367][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.688268][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.726964][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.734129][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.782616][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.813727][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.881529][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.891087][ T5693] loop2: detected capacity change from 0 to 512 [ 353.913261][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.920528][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.987362][ T5693] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 354.020492][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.047735][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.055615][ T5693] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 354.080594][ T5693] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.286: Failed to acquire dquot type 0 [ 354.148843][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.169120][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.190027][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.198474][ T5693] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 354.225618][ T5693] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 354.248301][ T5693] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.286: Failed to acquire dquot type 0 [ 354.259901][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.276661][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.311361][ T5693] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 354.332692][ T5578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.366712][ T5693] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 354.376968][ T5578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.388979][ T5693] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.286: Failed to acquire dquot type 0 [ 354.409527][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.426858][ T5693] EXT4-fs (loop2): 1 orphan inode deleted [ 354.444573][ T5693] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 354.454215][ T5693] ext4 filesystem being mounted at /0/bus supports timestamps until 2038 (0x7fffffff) [ 354.467295][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.590598][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.610137][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.628501][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.485885][ T3649] Bluetooth: hci0: command tx timeout [ 355.567395][ T3653] Bluetooth: hci2: command tx timeout [ 355.592023][ T5454] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 355.605678][ T5454] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 355.615177][ T5454] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz-executor: Failed to acquire dquot type 0 [ 356.151520][ T5454] EXT4-fs (loop2): unmounting filesystem. [ 356.194628][ T5684] chnl_net:caif_netlink_parms(): no params data found [ 356.256486][ T5668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.465903][ T5668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.701638][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.710211][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.721503][ T5668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.742716][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.864071][ T5668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.906779][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.917782][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.927459][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.944256][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.956584][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.963975][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.017935][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.025081][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.034596][ T5684] device bridge_slave_0 entered promiscuous mode [ 357.119326][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.128659][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.155312][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.162879][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.175310][ T5684] device bridge_slave_1 entered promiscuous mode [ 357.243691][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.252730][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.282489][ T5578] device veth0_vlan entered promiscuous mode [ 357.294617][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.312860][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.445226][ T5578] device veth1_vlan entered promiscuous mode [ 357.551199][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.566049][ T47] Bluetooth: hci0: command tx timeout [ 357.642912][ T47] Bluetooth: hci2: command tx timeout [ 357.684975][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.738235][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 357.751096][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 357.764325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.779517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.830067][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.993852][ T5578] device veth0_macvtap entered promiscuous mode [ 358.030625][ T5684] team0: Port device team_slave_0 added [ 358.045341][ T5684] team0: Port device team_slave_1 added [ 358.065126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.080711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.089116][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.104864][ T5578] device veth1_macvtap entered promiscuous mode [ 358.240985][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.249352][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.286570][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.304810][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.321832][ T5729] chnl_net:caif_netlink_parms(): no params data found [ 358.339767][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.347103][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.375272][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.482648][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.497196][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.512819][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.523839][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.544465][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.556733][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.575488][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.600726][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.614259][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.622469][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.632532][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.652274][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.659481][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.679812][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.694599][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.712894][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.768123][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.806102][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.820109][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.831479][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.845560][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.869101][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.885051][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.902473][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.913221][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.938011][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.949504][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.972934][ T5684] device hsr_slave_0 entered promiscuous mode [ 358.981729][ T5684] device hsr_slave_1 entered promiscuous mode [ 358.989828][ T5684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.998306][ T5684] Cannot create hsr debugfs directory [ 359.004081][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.015841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.024920][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.036547][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.046498][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.053626][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.085752][ T47] Bluetooth: hci3: command tx timeout [ 359.155216][ T5578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.167019][ T5578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.177045][ T5578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.186413][ T5578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.206771][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.216589][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.313161][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.340691][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.359216][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.368570][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.378186][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.388085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.517757][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.527506][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.536294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.553078][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.580603][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.589242][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.608385][ T5729] device bridge_slave_0 entered promiscuous mode [ 359.629415][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.637330][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.645943][ T5729] device bridge_slave_1 entered promiscuous mode [ 359.716039][ T47] Bluetooth: hci2: command tx timeout [ 359.912698][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.958963][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.082462][ T3962] device hsr_slave_0 left promiscuous mode [ 360.106075][ T3962] device hsr_slave_1 left promiscuous mode [ 360.126841][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.134346][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.149968][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.158326][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.166849][ T3962] device bridge_slave_1 left promiscuous mode [ 360.173161][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.193767][ T3962] device bridge_slave_0 left promiscuous mode [ 360.205239][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.230704][ T3962] device hsr_slave_0 left promiscuous mode [ 360.244769][ T3962] device hsr_slave_1 left promiscuous mode [ 360.252003][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.260573][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.268588][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.279241][ T3962] device bridge_slave_1 left promiscuous mode [ 360.290471][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.300799][ T3962] device bridge_slave_0 left promiscuous mode [ 360.307147][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.323230][ T3962] device hsr_slave_0 left promiscuous mode [ 360.329970][ T3962] device hsr_slave_1 left promiscuous mode [ 360.337251][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.344776][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.354188][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.362833][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.381957][ T3962] device bridge_slave_1 left promiscuous mode [ 360.393195][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.415300][ T3962] device bridge_slave_0 left promiscuous mode [ 360.421642][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.540773][ T3962] device veth1_macvtap left promiscuous mode [ 360.547098][ T3962] device veth0_macvtap left promiscuous mode [ 360.553431][ T3962] device veth1_vlan left promiscuous mode [ 360.559798][ T3962] device veth0_vlan left promiscuous mode [ 360.572064][ T3962] device veth1_macvtap left promiscuous mode [ 360.578969][ T3962] device veth0_macvtap left promiscuous mode [ 360.585144][ T3962] device veth1_vlan left promiscuous mode [ 360.605176][ T3962] device veth0_vlan left promiscuous mode [ 360.624659][ T3962] device veth1_macvtap left promiscuous mode [ 360.646075][ T3962] device veth0_macvtap left promiscuous mode [ 360.652272][ T3962] device veth1_vlan left promiscuous mode [ 360.660188][ T3962] device veth0_vlan left promiscuous mode [ 361.155815][ T47] Bluetooth: hci3: command tx timeout [ 361.667092][ T3962] team0 (unregistering): Port device team_slave_1 removed [ 361.715404][ T3962] team0 (unregistering): Port device team_slave_0 removed [ 361.768387][ T3962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.805853][ T47] Bluetooth: hci2: command tx timeout [ 361.828188][ T3962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.411185][ T3962] bond0 (unregistering): Released all slaves [ 362.965733][ T3962] team0 (unregistering): Port device team_slave_1 removed [ 363.019215][ T3962] team0 (unregistering): Port device team_slave_0 removed [ 363.130372][ T3962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.189584][ T3962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.245519][ T47] Bluetooth: hci3: command tx timeout [ 363.763709][ T3962] bond0 (unregistering): Released all slaves [ 364.319737][ T3962] team0 (unregistering): Port device team_slave_1 removed [ 364.372464][ T3962] team0 (unregistering): Port device team_slave_0 removed [ 364.429585][ T3962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.482520][ T3962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.036942][ T3962] bond0 (unregistering): Released all slaves [ 365.154559][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.179946][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.187733][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.196283][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.221529][ T5729] team0: Port device team_slave_0 added [ 365.234766][ T5729] team0: Port device team_slave_1 added [ 365.257115][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.271187][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 365.315843][ T47] Bluetooth: hci3: command tx timeout [ 365.328107][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.335078][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.362201][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.441320][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.455829][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.487242][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.512515][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.522169][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.549223][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 365.709839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.728290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.800134][ T5814] loop1: detected capacity change from 0 to 512 [ 365.866540][ T5814] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 365.906354][ T5814] EXT4-fs (loop1): 1 truncate cleaned up [ 365.912063][ T5814] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 366.116358][ T3653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.126809][ T3653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.135156][ T3653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.144301][ T3653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.153301][ T3653] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 366.161287][ T3653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.263232][ T5729] device hsr_slave_0 entered promiscuous mode [ 366.283377][ T5729] device hsr_slave_1 entered promiscuous mode [ 366.325677][ T5820] I/O error, dev loop128, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 366.379702][ T5820] hub 6-0:1.0: USB hub found [ 366.385707][ T5820] hub 6-0:1.0: 1 port detected [ 366.963104][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.981266][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.999597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.020476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.037763][ T5578] EXT4-fs (loop1): unmounting filesystem. [ 367.050133][ T5668] device veth0_vlan entered promiscuous mode [ 367.151279][ T5668] device veth1_vlan entered promiscuous mode [ 367.221521][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.237358][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.246675][ T5823] loop1: detected capacity change from 0 to 512 [ 367.280141][ T5668] device veth0_macvtap entered promiscuous mode [ 367.333687][ T5823] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.341: iget: special inode unallocated [ 367.366422][ T5823] EXT4-fs (loop1): get root inode failed [ 367.372126][ T5823] EXT4-fs (loop1): mount failed [ 367.409833][ T5668] device veth1_macvtap entered promiscuous mode [ 367.745095][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.764246][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.774788][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.963865][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.225129][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.270605][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.282475][ T47] Bluetooth: hci5: command tx timeout [ 368.423787][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.576750][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.624803][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.635073][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.646647][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.656846][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.667790][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.688187][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.700103][ T5668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.764908][ T5668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.785188][ T5668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.802637][ T5668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.823016][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.868179][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 368.894855][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 368.904717][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 368.914627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.924111][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.937533][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 368.963363][ T5684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.019318][ T5842] loop1: detected capacity change from 0 to 4096 [ 369.054510][ T5684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.102866][ T5842] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 369.179830][ T5729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.231498][ T5684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.270199][ T5684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.438693][ T5729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.695489][ T5855] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 369.702996][ T5855] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 370.363724][ T47] Bluetooth: hci5: command tx timeout [ 370.400766][ T5729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.456776][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.465253][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.526927][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.534108][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.546366][ T5817] device bridge_slave_0 entered promiscuous mode [ 370.629260][ T5729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.660726][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 370.699575][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.723278][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.740495][ T5817] device bridge_slave_1 entered promiscuous mode [ 370.836703][ T3891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.848161][ T3891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.920507][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.989811][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.020913][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.139826][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.380576][ T5684] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.403385][ T5817] team0: Port device team_slave_0 added [ 372.417912][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.435679][ T47] Bluetooth: hci5: command tx timeout [ 372.443951][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.479902][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.677061][ T5817] team0: Port device team_slave_1 added [ 372.729663][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.829123][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.893070][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.410129][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.508201][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.549447][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.591862][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.599013][ T3891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.640814][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.674937][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.709573][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.716905][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.734115][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.841313][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.850577][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.878387][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.897130][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.916859][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.697728][ T3653] Bluetooth: hci5: command tx timeout [ 374.736764][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.776048][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.931043][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.959711][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.988126][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.262537][ T5905] TCP: MD5 Hash mismatch for [fe80::bb]:0->[ff02::1]:20002 L3 index 0 [ 375.325272][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.340969][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.351168][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.363297][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.382163][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.409258][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.436234][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.459152][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.494986][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.529615][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.861377][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 375.882279][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 375.972263][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.002267][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.037608][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.058485][ T3951] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.065690][ T3951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.079510][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.092484][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.101770][ T3951] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.109005][ T3951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.118134][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.161375][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 376.168562][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 376.279673][ T5904] infiniband syz1: set active [ 376.284422][ T5904] infiniband syz1: added vcan0 [ 376.289820][ T5904] rdma_rxe: unable to create cq [ 376.294754][ T5904] infiniband syz1: Couldn't create ib_mad CQ [ 376.301063][ T5904] infiniband syz1: Couldn't open port 1 [ 376.316136][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.333350][ T5904] RDS/IB: syz1: added [ 376.335230][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.337518][ T5904] smc: adding ib device syz1 with port count 1 [ 376.337578][ T5904] smc: ib device syz1 port 1 has pnetid [ 376.444452][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.500892][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.530741][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.563294][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.572428][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.608944][ T3689] vcan0 speed is unknown, defaulting to 1000 [ 376.618201][ T5817] device hsr_slave_0 entered promiscuous mode [ 376.634776][ T5817] device hsr_slave_1 entered promiscuous mode [ 376.659081][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.694514][ T5817] Cannot create hsr debugfs directory [ 376.747102][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 376.756970][ T5729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.775491][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.941788][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.964612][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.997349][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.043300][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.077583][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 377.077854][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.187548][ T3718] vcan0 speed is unknown, defaulting to 1000 [ 377.195922][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 377.305801][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 377.387959][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.857389][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.891374][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.937239][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 378.183447][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 378.514719][ T5904] vcan0 speed is unknown, defaulting to 1000 [ 379.357196][ T5928] IPv6: syztnl1: Disabled Multicast RS [ 379.620815][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.627464][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.770157][ T5933] netlink: 'syz.0.352': attribute type 1 has an invalid length. [ 379.779929][ T5933] netlink: 'syz.0.352': attribute type 2 has an invalid length. [ 380.150531][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.352'. [ 380.169019][ T5817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.310016][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.359509][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.459214][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.521072][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 380.714001][ T5817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.951341][ T5684] device veth0_vlan entered promiscuous mode [ 380.989891][ T5684] device veth1_vlan entered promiscuous mode [ 381.102735][ T5684] device veth0_macvtap entered promiscuous mode [ 381.152193][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.200576][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.260730][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.274372][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.287149][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 381.298345][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 381.308868][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.326048][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.582600][ T5817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.669684][ T5684] device veth1_macvtap entered promiscuous mode [ 381.691640][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.703812][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.721903][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.869930][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 382.219300][ T5958] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 383.713220][ T5817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.776041][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.792099][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.908069][ T5968] loop1: detected capacity change from 0 to 164 [ 383.984091][ T5729] device veth0_vlan entered promiscuous mode [ 383.992837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.010429][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.073531][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.084439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.098058][ T5729] device veth1_vlan entered promiscuous mode [ 384.141388][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.180290][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.235446][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.253179][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.263633][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.283102][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.293190][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.303868][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.341721][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.166351][ T3962] device hsr_slave_0 left promiscuous mode [ 385.227579][ T3962] device hsr_slave_1 left promiscuous mode [ 385.262055][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.293140][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.302120][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.343243][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.422064][ T5978] input: syz0 as /devices/virtual/input/input9 [ 385.484201][ T3962] device bridge_slave_1 left promiscuous mode [ 385.623587][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.684186][ T3962] device bridge_slave_0 left promiscuous mode [ 385.711114][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.818141][ T3962] device veth1_macvtap left promiscuous mode [ 385.824251][ T3962] device veth0_macvtap left promiscuous mode [ 385.847014][ T3962] device veth1_vlan left promiscuous mode [ 385.852898][ T3962] device veth0_vlan left promiscuous mode [ 386.063326][ T5983] syz.1.360[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.063450][ T5983] syz.1.360[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.024265][ T3962] team0 (unregistering): Port device team_slave_1 removed [ 389.088114][ T3962] team0 (unregistering): Port device team_slave_0 removed [ 389.141839][ T3962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.197505][ T3962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.780815][ T3962] bond0 (unregistering): Released all slaves [ 389.870356][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.878950][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.887769][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.896781][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.913767][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.925928][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.936647][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.948032][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.959939][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.970515][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.982098][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.995755][ T5729] device veth0_macvtap entered promiscuous mode [ 390.081010][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.106434][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.116149][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.145168][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.234630][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.272983][ T5684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.283480][ T5684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.297073][ T5684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.309811][ T5684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.324414][ T5729] device veth1_macvtap entered promiscuous mode [ 390.343708][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.370116][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.380509][ T26] audit: type=1326 audit(1728655059.061:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 390.414655][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.435815][ T26] audit: type=1326 audit(1728655059.061:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 390.465465][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.483789][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.495174][ T26] audit: type=1326 audit(1728655059.061:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 390.533644][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.543697][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.555426][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.561054][ T6005] overlayfs: missing 'lowerdir' [ 390.572630][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.623181][ T26] audit: type=1326 audit(1728655059.061:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 390.712683][ T26] audit: type=1326 audit(1728655059.061:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 390.737566][ T26] audit: type=1326 audit(1728655059.091:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 390.818084][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.883432][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.996552][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.073053][ T26] audit: type=1326 audit(1728655059.091:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 391.321683][ T26] audit: type=1326 audit(1728655059.091:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 391.387952][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.408338][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.418402][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.428885][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.438886][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.449419][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.459434][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.469920][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.481928][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.494441][ T5729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.522302][ T5729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.532311][ T26] audit: type=1326 audit(1728655059.091:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 391.561101][ T5729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.574600][ T5729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.584431][ T26] audit: type=1326 audit(1728655059.091:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957a97dff9 code=0x7ffc0000 [ 391.653971][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 391.671934][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.483893][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.548180][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.673181][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.673740][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 392.840752][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.867373][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 393.616807][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.034911][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.102912][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.116274][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.124709][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.208477][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 394.253700][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.168382][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.228771][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.315812][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 395.388460][ T6042] loop2: detected capacity change from 0 to 128 [ 396.532080][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.534164][ T6044] loop2: detected capacity change from 0 to 256 [ 396.737568][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.750522][ T6044] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 396.921920][ T6051] loop4: detected capacity change from 0 to 1024 [ 396.939201][ T6051] hfsplus: umask requires a value [ 396.944322][ T6051] hfsplus: unable to parse mount options [ 396.974115][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.029674][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.072365][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.691485][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.752569][ T3962] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.759781][ T3962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.069554][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.093847][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.484290][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.491535][ T3962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.579326][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.593206][ T6060] loop4: detected capacity change from 0 to 1024 [ 398.641838][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.668862][ T6060] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 398.706741][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.747670][ T6060] EXT4-fs (loop4): group descriptors corrupted! [ 398.785750][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.995660][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.036245][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.109329][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.138463][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 400.922197][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 400.954667][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.977873][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.001574][ T5817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 401.027476][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 401.043639][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.490564][ T6084] loop2: detected capacity change from 0 to 256 [ 401.520513][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.727007][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.587123][ T3646] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 403.876684][ T3649] Bluetooth: hci0: command tx timeout [ 404.145006][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.305535][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 404.398826][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.435521][ T3646] usb 2-1: device not accepting address 2, error -71 [ 405.847565][ T6101] overlayfs: missing 'lowerdir' [ 405.866435][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.917551][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.948164][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.958553][ T3649] Bluetooth: hci0: command tx timeout [ 406.004129][ T5817] device veth0_vlan entered promiscuous mode [ 406.062931][ T5817] device veth1_vlan entered promiscuous mode [ 406.114988][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.128959][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.155644][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 406.185245][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.194632][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.211923][ T6108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.214580][ T5817] device veth0_macvtap entered promiscuous mode [ 406.227124][ T6108] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 406.234084][ T6108] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 406.238185][ T5817] device veth1_macvtap entered promiscuous mode [ 406.242628][ T6108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.254904][ T6108] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 406.262025][ T6108] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 406.270184][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.271822][ T6108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.282168][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.296731][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.296799][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.318993][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.319714][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.333612][ T6108] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 406.339763][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.352393][ T14] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 406.356026][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.356051][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.356069][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.356085][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.356101][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.358042][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.373199][ T6108] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 406.376113][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.392876][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.399060][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.413764][ T6108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.416753][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.464135][ T14] usb 1-1: config 0 descriptor?? [ 406.472224][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.475705][ T6108] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 406.484573][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.512585][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.522952][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.534776][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.535588][ T14] usb 1-1: can't set config #0, error -71 [ 406.544839][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.558307][ T6108] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 406.561310][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.579382][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.590158][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.600684][ T6108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.607149][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.610718][ T14] usb 1-1: USB disconnect, device number 6 [ 406.619682][ T6108] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 406.631573][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.646473][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.656645][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.676331][ T6108] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 406.683939][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.695654][ T6108] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 406.709594][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.718945][ T6108] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 406.725516][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.740342][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.741968][ T6108] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 406.755313][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.191674][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.270477][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.279583][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 408.295549][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 408.356920][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 408.543315][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.530694][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 410.541305][ T47] Bluetooth: hci5: command 0x0c1a tx timeout [ 410.550589][ T3649] Bluetooth: hci4: command 0x0406 tx timeout [ 410.556972][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.619283][ T3653] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.625476][ T3653] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.634844][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.982422][ T3891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.064710][ T3891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.370725][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.688126][ T6151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.763774][ T3649] Bluetooth: hci5: unexpected event for opcode 0x0c14 [ 412.437871][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 412.437965][ T26] audit: type=1326 audit(1728655081.121:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.2.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46917dff9 code=0x0 [ 412.609575][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 412.705990][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 413.299968][ T6165] loop2: detected capacity change from 0 to 256 [ 413.401644][ T6165] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 414.480322][ T6171] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 414.833095][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 415.706106][ T6181] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 417.824858][ T3653] Bluetooth: hci1: command 0x0c1a tx timeout [ 419.100794][ T6202] random: crng reseeded on system resumption [ 427.330611][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 427.457515][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.569220][ T3686] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 428.845459][ T3686] usb 4-1: Using ep0 maxpacket: 32 [ 429.026031][ T3686] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 429.077100][ T3686] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 429.411966][ T6259] loop2: detected capacity change from 0 to 2048 [ 429.597497][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.838315][ T3686] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 429.856134][ T6259] Alternate GPT is invalid, using primary GPT. [ 429.862433][ T6259] loop2: p1 p2 p3 [ 430.034885][ T3686] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 430.050384][ T3686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 430.844827][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.876037][ T3686] usb 4-1: string descriptor 0 read error: -71 [ 430.882340][ T3686] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 431.126536][ T3686] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 431.157575][ T3686] usb 4-1: config 0 descriptor?? [ 431.895835][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.966529][ T3686] usb 4-1: can't set config #0, error -71 [ 432.235796][ T3686] usb 4-1: USB disconnect, device number 3 [ 432.905519][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 433.206187][ T7] usb 2-1: too many configurations: 164, using maximum allowed: 8 [ 434.106434][ T7] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 434.240353][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.478765][ T7] usb 2-1: config 0 descriptor?? [ 434.586985][ T7] usb 2-1: bad CDC descriptors [ 434.607670][ T7] usb 2-1: bad CDC descriptors [ 434.724426][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.425'. [ 434.864954][ T3653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.877582][ T3653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.887456][ T3653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.899156][ T3653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.908796][ T3653] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 434.918097][ T3653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.011922][ T6296] tipc: Failed to obtain node identity [ 435.018900][ T6296] tipc: Enabling of bearer rejected, failed to enable media [ 435.191956][ T3951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.240131][ T6297] vcan0 speed is unknown, defaulting to 1000 [ 435.476799][ T3951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.957833][ T7] usb 2-1: USB disconnect, device number 4 [ 436.073846][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 436.410070][ T6315] loop1: detected capacity change from 0 to 164 [ 436.476539][ T3951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.593224][ T6315] Unable to read rock-ridge attributes [ 437.006976][ T3653] Bluetooth: hci2: command tx timeout [ 437.757995][ T3951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.126583][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 438.722611][ T6333] loop1: detected capacity change from 0 to 256 [ 439.077258][ T3653] Bluetooth: hci2: command tx timeout [ 439.129964][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 439.368216][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 440.038750][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.054654][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.195780][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.175754][ T3653] Bluetooth: hci2: command tx timeout [ 441.782163][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.860869][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.940870][ T6297] device bridge_slave_0 entered promiscuous mode [ 442.125613][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.136485][ T6394] loop1: detected capacity change from 0 to 512 [ 442.144623][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.182662][ T6297] device bridge_slave_1 entered promiscuous mode [ 442.189573][ T6394] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 442.234736][ T6394] UDF-fs: Scanning with blocksize 512 failed [ 442.269334][ T6394] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 442.303718][ T6394] UDF-fs: Scanning with blocksize 1024 failed [ 442.324076][ T6394] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 442.365609][ T6394] UDF-fs: Scanning with blocksize 2048 failed [ 442.398836][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.441270][ T6394] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 442.548384][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.460212][ T3649] Bluetooth: hci2: command tx timeout [ 443.494035][ T6394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.623226][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 443.785298][ T6297] team0: Port device team_slave_0 added [ 443.908581][ T6409] loop2: detected capacity change from 0 to 2048 [ 443.940357][ T6409] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 443.998344][ T6409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.012932][ T6297] team0: Port device team_slave_1 added [ 447.583303][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.604351][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.798260][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.779985][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.831078][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.003604][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.053757][ T3951] device hsr_slave_0 left promiscuous mode [ 449.076023][ T3951] device hsr_slave_1 left promiscuous mode [ 449.113425][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.155528][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.177536][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.194910][ T6436] loop2: detected capacity change from 0 to 256 [ 450.242006][ T6436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 450.416612][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.441333][ T3951] device bridge_slave_1 left promiscuous mode [ 450.451830][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.782571][ T3951] device bridge_slave_0 left promiscuous mode [ 450.862124][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.769659][ T6454] loop2: detected capacity change from 0 to 1024 [ 451.783026][ T6454] hfsplus: umask requires a value [ 451.788210][ T6454] hfsplus: unable to parse mount options [ 453.584408][ T6453] loop1: detected capacity change from 0 to 1024 [ 453.949834][ T6453] hfsplus: xattr searching failed [ 453.997783][ T3951] device veth1_macvtap left promiscuous mode [ 454.168800][ T3964] hfsplus: bad catalog file entry [ 454.174380][ T3964] hfsplus: b-tree write err: -5, ino 3 [ 454.195596][ T3951] device veth0_macvtap left promiscuous mode [ 454.201804][ T3951] device veth1_vlan left promiscuous mode [ 454.395944][ T3951] device veth0_vlan left promiscuous mode [ 455.400367][ T6467] virtio-fs: tag <(null)> not found [ 457.427797][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 457.439792][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.449735][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.460587][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 457.469959][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 457.477441][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 458.120177][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 458.397865][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 458.468776][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 458.522763][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.582005][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.241870][ T3951] bond0 (unregistering): Released all slaves [ 459.389165][ T6297] device hsr_slave_0 entered promiscuous mode [ 459.403397][ T6297] device hsr_slave_1 entered promiscuous mode [ 459.413940][ T6297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.426108][ T6297] Cannot create hsr debugfs directory [ 460.532645][ T47] Bluetooth: hci6: command tx timeout [ 460.847695][ T6477] vcan0 speed is unknown, defaulting to 1000 [ 462.394818][ T6497] loop2: detected capacity change from 0 to 128 [ 462.597680][ T3649] Bluetooth: hci6: command tx timeout [ 462.863777][ T6465] vcan0 speed is unknown, defaulting to 1000 [ 463.315811][ T6509] program syz.2.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.301468][ T47] Bluetooth: hci6: command tx timeout [ 467.315781][ T47] Bluetooth: hci6: command tx timeout [ 467.359090][ T3649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.371075][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.380595][ T3649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.509156][ T3649] Bluetooth: hci3: Malformed LE Event: 0x1d [ 467.604170][ T3649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.688411][ T3649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 467.697475][ T3649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.112627][ T6477] chnl_net:caif_netlink_parms(): no params data found [ 468.187357][ T6531] vcan0 speed is unknown, defaulting to 1000 [ 468.252824][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'. [ 468.288656][ T3951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.350454][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 468.409174][ T3951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.576026][ T3951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.903587][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.910973][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.919995][ T6477] device bridge_slave_0 entered promiscuous mode [ 470.195391][ T6551] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 470.204420][ T6551] overlayfs: missing 'lowerdir' [ 470.819719][ T47] Bluetooth: hci0: command tx timeout [ 470.827553][ T26] audit: type=1107 audit(1728655138.971:105): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 471.108547][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.965569][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.021995][ T6477] device bridge_slave_1 entered promiscuous mode [ 472.202367][ T3951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.277584][ T6563] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 472.945506][ T3649] Bluetooth: hci0: command tx timeout [ 473.075920][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.738221][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.934224][ T6565] futex_wake_op: syz.2.473 tries to shift op by -1; fix this program [ 473.957099][ T3649] Bluetooth: hci5: command 0x0c1a tx timeout [ 474.951959][ T6477] team0: Port device team_slave_0 added [ 474.995673][ T47] Bluetooth: hci0: command tx timeout [ 475.070672][ T6297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.099975][ T6477] team0: Port device team_slave_1 added [ 475.384527][ T47] Bluetooth: hci3: Malformed LE Event: 0x1d [ 476.196079][ T47] Bluetooth: hci5: command 0x0c1a tx timeout [ 480.481777][ T47] Bluetooth: hci0: command tx timeout [ 480.487686][ T47] Bluetooth: hci5: command 0x0c1a tx timeout [ 480.506706][ T6297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 480.707365][ T6297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 480.721795][ T6297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 480.754997][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.796636][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.843249][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.856416][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.863402][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.986902][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.976126][ T6477] device hsr_slave_0 entered promiscuous mode [ 481.999481][ T6477] device hsr_slave_1 entered promiscuous mode [ 482.015882][ T6477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.035476][ T6477] Cannot create hsr debugfs directory [ 482.178231][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 483.268693][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 484.716572][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.738862][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.833253][ T6297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.915628][ T6297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.914756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.926489][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.945997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.954910][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.974310][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.981514][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.997470][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 486.012159][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.030243][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.037427][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.059878][ T6631] loop2: detected capacity change from 0 to 1024 [ 486.083710][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.225550][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.244592][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.254953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.264599][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 486.273838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.282970][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.304755][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.922352][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.931171][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.303413][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.316298][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.472218][ T6531] device bridge_slave_0 entered promiscuous mode [ 487.492593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.536491][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.747128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.254873][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.275735][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.284056][ T6531] device bridge_slave_1 entered promiscuous mode [ 489.951963][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.006975][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.054332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.073002][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.264532][ T6531] team0: Port device team_slave_0 added [ 490.401660][ T6531] team0: Port device team_slave_1 added [ 490.422244][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.940880][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.955598][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.783275][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.798673][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.811584][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.838742][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.816345][ T6699] loop2: detected capacity change from 0 to 1024 [ 493.038563][ T6531] device hsr_slave_0 entered promiscuous mode [ 493.076785][ T6531] device hsr_slave_1 entered promiscuous mode [ 493.117802][ T6531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.141458][ T6531] Cannot create hsr debugfs directory [ 493.206181][ T6705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.215813][ T6705] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 493.227930][ T6705] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 493.243619][ T6705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.252967][ T6705] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 493.263794][ T6705] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 493.287198][ T6705] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 493.298457][ T6705] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 493.325388][ T6705] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 493.339220][ T6705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.348682][ T6705] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 493.366090][ T6705] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 493.382511][ T6705] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 493.397246][ T6705] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 493.411702][ T6705] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 493.427252][ T6705] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.439795][ T6705] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 493.453239][ T6705] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 493.553711][ T6477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 493.563514][ T52] block nbd2: Attempted send on invalid socket [ 493.572218][ T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 493.588455][ T6710] EXT4-fs (nbd2): unable to read superblock [ 493.622469][ T26] audit: type=1800 audit(1728655162.311:106): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.493" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 493.657158][ T3951] device hsr_slave_0 left promiscuous mode [ 493.685639][ T3951] device hsr_slave_1 left promiscuous mode [ 493.735053][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.761824][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.806172][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.830223][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.844562][ T3951] device bridge_slave_1 left promiscuous mode [ 493.857456][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.904197][ T3951] device bridge_slave_0 left promiscuous mode [ 493.917113][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.006439][ T3951] device veth1_macvtap left promiscuous mode [ 494.020816][ T3951] device veth0_macvtap left promiscuous mode [ 494.028734][ T3951] device veth1_vlan left promiscuous mode [ 494.036161][ T3951] device veth0_vlan left promiscuous mode [ 494.491523][ T3951] infiniband syz1: set down [ 494.846295][ T33] hfsplus: b-tree write err: -5, ino 4 [ 494.968067][ T3649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.983070][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.992012][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.004463][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.012526][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 495.020036][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.235653][ T3649] Bluetooth: hci4: command 0x0406 tx timeout [ 495.371559][ T3649] Bluetooth: hci5: command 0x0c1a tx timeout [ 495.379107][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.396696][ T3649] Bluetooth: hci6: command 0x0c1a tx timeout [ 495.403041][ T3649] Bluetooth: hci2: command 0x0c1a tx timeout [ 495.475468][ T3649] Bluetooth: hci0: command 0x0c1a tx timeout [ 496.129016][ T6739] loop2: detected capacity change from 0 to 512 [ 496.187608][ T6739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 496.199481][ T6739] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff) [ 496.524161][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 496.677248][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 496.771641][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.132356][ T3653] Bluetooth: hci1: command tx timeout [ 497.210145][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.315730][ T3653] Bluetooth: hci4: command 0x0406 tx timeout [ 497.342123][ T5729] EXT4-fs (loop2): unmounting filesystem. [ 497.395488][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 497.401556][ T3653] Bluetooth: hci5: command 0x0c1a tx timeout [ 497.482162][ T3653] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.490054][ T3649] Bluetooth: hci6: command 0x0c1a tx timeout [ 497.560593][ T3649] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.537944][ T3951] bond0 (unregistering): Released all slaves [ 498.583082][ T3964] smc: removing ib device syz1 [ 498.715216][ T6477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.735923][ T6477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.772552][ T3686] vcan0 speed is unknown, defaulting to 1000 [ 498.970296][ T6477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 499.155505][ T3649] Bluetooth: hci1: command tx timeout [ 499.260447][ T6531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.587809][ T6531] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.704430][ T6531] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.990646][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.035991][ T6531] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.088828][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.107252][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.140798][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.293361][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.302575][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.311286][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.318414][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.395980][ T6731] chnl_net:caif_netlink_parms(): no params data found [ 500.542092][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.750555][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.789676][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.835934][ T28] INFO: task syz.3.335:5666 blocked for more than 148 seconds. [ 500.844033][ T28] Not tainted 6.1.112-syzkaller #0 [ 500.850065][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.857229][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 500.881843][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.926624][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.966388][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.974468][ T28] task:syz.3.335 state:D stack:25016 pid:5666 ppid:5029 flags:0x00004004 [ 501.046205][ T28] Call Trace: [ 501.062333][ T28] [ 501.074942][ T28] __schedule+0x143f/0x4570 [ 501.116386][ T28] ? release_firmware_map_entry+0x186/0x186 [ 501.122367][ T28] ? blk_check_plugged+0x250/0x250 [ 501.175370][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 501.180682][ T28] ? blk_check_plugged+0x250/0x250 [ 501.198254][ T28] schedule+0xbf/0x180 [ 501.214363][ T28] io_schedule+0x88/0x100 [ 501.219161][ T28] folio_wait_bit_common+0x878/0x1290 [ 501.224606][ T28] ? folio_wait_bit+0x20/0x20 [ 501.235758][ T3649] Bluetooth: hci1: command tx timeout [ 501.238604][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 501.252288][ T28] ? erofs_map_blocks+0x14d0/0x14d0 [ 501.259951][ T28] ? bio_add_page+0x3a4/0x750 [ 501.264685][ T28] z_erofs_runqueue+0x993/0x1ca0 [ 501.273556][ T28] ? z_erofs_do_read_page+0x3bd0/0x3bd0 [ 501.279421][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 501.284509][ T28] ? z_erofs_pcluster_readmore+0x41a/0x450 [ 501.290409][ T28] z_erofs_readahead+0xc26/0x1030 [ 501.295558][ T28] ? z_erofs_read_folio+0x760/0x760 [ 501.300813][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 501.306627][ T28] ? blk_start_plug+0x95/0x110 [ 501.311437][ T28] read_pages+0x17f/0x830 [ 501.316242][ T28] ? folio_add_lru+0x34d/0xd70 [ 501.321052][ T28] ? folio_add_lru+0x34d/0xd70 [ 501.325941][ T28] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 501.331614][ T28] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 501.337186][ T28] page_cache_ra_unbounded+0x68b/0x7b0 [ 501.342687][ T28] force_page_cache_ra+0x2a3/0x300 [ 501.347955][ T28] generic_fadvise+0x553/0x7b0 [ 501.353539][ T28] ? dump_task+0x620/0x620 [ 501.358046][ T28] ? __fget_files+0x28/0x4a0 [ 501.362663][ T28] ? __fdget+0x182/0x210 [ 501.367026][ T28] __x64_sys_fadvise64+0x138/0x180 [ 501.372171][ T28] do_syscall_64+0x3b/0xb0 [ 501.376677][ T28] ? clear_bhb_loop+0x45/0xa0 [ 501.381419][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.387431][ T28] RIP: 0033:0x7fb86cb7dff9 [ 501.391886][ T28] RSP: 002b:00007fb86d91f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 501.400660][ T28] RAX: ffffffffffffffda RBX: 00007fb86cd36058 RCX: 00007fb86cb7dff9 [ 501.408994][ T28] RDX: 0000000000000000 RSI: 0000000000e0ffff RDI: 0000000000000005 [ 501.417969][ T28] RBP: 00007fb86cbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 501.426264][ T28] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 501.434265][ T28] R13: 0000000000000000 R14: 00007fb86cd36058 R15: 00007ffe034af478 [ 501.442350][ T28] [ 501.479289][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.485762][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.520016][ T28] [ 501.520016][ T28] Showing all locks held in the system: [ 501.550203][ T28] 3 locks held by kworker/0:0/7: [ 501.576893][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 501.597943][ T28] #1: ffff8880b8e27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 501.619620][ T28] #2: ffffffff97548100 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0xd8/0x4e0 [ 501.635254][ T28] 1 lock held by rcu_tasks_kthre/12: [ 501.649759][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 501.671711][ T28] 1 lock held by rcu_tasks_trace/13: [ 501.681403][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 501.698436][ T28] 3 locks held by kworker/0:1/14: [ 501.703496][ T28] #0: ffff88814b5af938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.720421][ T28] #1: ffffc90000137d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.741979][ T28] #2: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 501.753383][ T28] 1 lock held by khungtaskd/28: [ 501.765575][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 501.783892][ T28] 3 locks held by kworker/1:2/153: [ 501.790178][ T28] 2 locks held by getty/3404: [ 501.805466][ T28] #0: ffff88802e12d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 501.817567][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 501.827842][ T28] 2 locks held by kworker/1:3/3686: [ 501.833049][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.843524][ T28] #1: ffffc900040cfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.855028][ T28] 3 locks held by kworker/1:5/3715: [ 501.860272][ T28] #0: ffff88814b5af938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.872379][ T28] #1: ffffc9000410fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.884909][ T28] #2: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 501.894575][ T28] 3 locks held by kworker/1:6/3718: [ 501.899929][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.910423][ T28] #1: ffffc9000423fd20 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.920006][ T28] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 501.931320][ T28] 6 locks held by kworker/u4:17/3951: [ 501.937077][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.947520][ T28] #1: ffffc90004e4fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.957661][ T28] #2: ffffffff8e4ee490 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 501.967588][ T28] #3: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x1d0 [ 501.977009][ T28] #4: ffff88805a7753e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xb6/0x1d0 [ 501.987527][ T28] #5: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 501.998523][ T28] 1 lock held by syz.3.335/5666: [ 502.003490][ T28] #0: ffff888072391898 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 502.014840][ T28] 2 locks held by syz-executor/5729: [ 502.020194][ T28] #0: ffff8880545310b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 502.032781][ T28] #1: ffff888054530078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 502.043004][ T28] 7 locks held by syz-executor/6531: [ 502.048435][ T28] #0: ffff88807e362460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 502.057486][ T28] #1: ffff888059bd7488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 502.067873][ T28] #2: ffff88814532c0f0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 502.078021][ T28] #3: ffffffff8de23ac8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 502.088446][ T28] #4: ffff88807a74f0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 502.097832][ T28] #5: ffff8880770f82f8 (&devlink->lock_key#20){+.+.}-{3:3}, at: nsim_drv_probe+0xc9/0xb20 [ 502.107932][ T28] #6: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x30c/0x3f0 [ 502.118221][ T28] 2 locks held by syz.3.504/6782: [ 502.123276][ T28] #0: ffff8880758fd0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 502.134006][ T28] #1: ffff8880758fc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 502.144215][ T28] [ 502.147078][ T28] ============================================= [ 502.147078][ T28] [ 502.156044][ T28] NMI backtrace for cpu 0 [ 502.160408][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 502.168311][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.178405][ T28] Call Trace: [ 502.181683][ T28] [ 502.184636][ T28] dump_stack_lvl+0x1e3/0x2cb [ 502.189350][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 502.194857][ T28] ? panic+0x764/0x764 [ 502.198941][ T28] ? vprintk_emit+0x622/0x740 [ 502.203660][ T28] ? printk_sprint+0x490/0x490 [ 502.208538][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 502.213671][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 502.218689][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 502.224844][ T28] ? _printk+0xd1/0x111 [ 502.229013][ T28] ? panic+0x764/0x764 [ 502.233195][ T28] ? __wake_up_klogd+0xcc/0x100 [ 502.238062][ T28] ? panic+0x764/0x764 [ 502.242130][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 502.248210][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 502.254305][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 502.260300][ T28] watchdog+0xf88/0xfd0 [ 502.264476][ T28] ? watchdog+0x1f8/0xfd0 [ 502.268826][ T28] kthread+0x28d/0x320 [ 502.272900][ T28] ? hungtask_pm_notify+0x50/0x50 [ 502.277938][ T28] ? kthread_blkcg+0xd0/0xd0 [ 502.282535][ T28] ret_from_fork+0x1f/0x30 [ 502.286975][ T28] [ 502.290599][ T28] Sending NMI from CPU 0 to CPUs 1: [ 502.296027][ C1] NMI backtrace for cpu 1 [ 502.296040][ C1] CPU: 1 PID: 3891 Comm: kworker/u4:13 Not tainted 6.1.112-syzkaller #0 [ 502.296057][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.296068][ C1] Workqueue: phy27 ieee80211_iface_work [ 502.296094][ C1] RIP: 0010:check_preemption_disabled+0x2e/0x110 [ 502.296119][ C1] Code: 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d d0 55 5b 75 65 8b 05 71 ab 5b 75 a9 ff ff ff 7f 74 22 <65> 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 c7 00 00 00 89 d8 [ 502.296134][ C1] RSP: 0018:ffffc90004bc7888 EFLAGS: 00000002 [ 502.296148][ C1] RAX: 0000000080000001 RBX: 0000000000000001 RCX: ffffffff816af0fa [ 502.296160][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5d7180 [ 502.296173][ C1] RBP: ffffc90004bc7968 R08: dffffc0000000000 R09: fffffbfff223ba63 [ 502.296186][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801b3d46d0 [ 502.296198][ C1] R13: 0000000000000002 R14: ffff88801b3d4658 R15: 1ffff1100367a8cb [ 502.296210][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 502.296225][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.296237][ C1] CR2: 00007ff4f7c36440 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 502.296252][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.296262][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.296272][ C1] Call Trace: [ 502.296277][ C1] [ 502.296283][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 502.296301][ C1] ? read_lock_is_recursive+0x10/0x10 [ 502.296328][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 502.296354][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 502.296381][ C1] ? nmi_handle+0x12e/0x440 [ 502.296407][ C1] ? nmi_handle+0x25/0x440 [ 502.296432][ C1] ? check_preemption_disabled+0x2e/0x110 [ 502.296454][ C1] ? default_do_nmi+0x62/0x150 [ 502.296472][ C1] ? exc_nmi+0xa8/0x100 [ 502.296488][ C1] ? end_repeat_nmi+0x16/0x31 [ 502.296517][ C1] ? mark_lock+0x9a/0x340 [ 502.296541][ C1] ? check_preemption_disabled+0x2e/0x110 [ 502.296563][ C1] ? check_preemption_disabled+0x2e/0x110 [ 502.296586][ C1] ? check_preemption_disabled+0x2e/0x110 [ 502.296608][ C1] [ 502.296613][ C1] [ 502.296619][ C1] lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 502.296646][ C1] ? print_irqtrace_events+0x210/0x210 [ 502.296671][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 502.296697][ C1] trace_hardirqs_on+0x34/0x40 [ 502.296722][ C1] _raw_spin_unlock_irqrestore+0x8b/0x130 [ 502.296744][ C1] ? _raw_spin_unlock+0x40/0x40 [ 502.296770][ C1] debug_check_no_obj_freed+0x455/0x4e0 [ 502.296794][ C1] __kmem_cache_free+0x205/0x3c0 [ 502.296816][ C1] ? skb_release_data+0x5de/0x7a0 [ 502.296845][ C1] skb_release_data+0x5de/0x7a0 [ 502.296874][ C1] ? ieee80211_iface_work+0x260/0xce0 [ 502.296894][ C1] kfree_skb_reason+0x16f/0x390 [ 502.296921][ C1] ieee80211_iface_work+0x260/0xce0 [ 502.296945][ C1] ? process_one_work+0x7a9/0x11d0 [ 502.296964][ C1] process_one_work+0x8a9/0x11d0 [ 502.296990][ C1] ? worker_detach_from_pool+0x260/0x260 [ 502.297012][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 502.297033][ C1] ? kthread_data+0x4e/0xc0 [ 502.297059][ C1] ? wq_worker_running+0x97/0x190 [ 502.297077][ C1] worker_thread+0xa47/0x1200 [ 502.297101][ C1] ? _raw_spin_unlock+0x40/0x40 [ 502.297127][ C1] kthread+0x28d/0x320 [ 502.297140][ C1] ? worker_clr_flags+0x190/0x190 [ 502.297159][ C1] ? kthread_blkcg+0xd0/0xd0 [ 502.297175][ C1] ret_from_fork+0x1f/0x30 [ 502.297204][ C1] [ 502.663963][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 502.670858][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 502.678783][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.688867][ T28] Call Trace: [ 502.692165][ T28] [ 502.695113][ T28] dump_stack_lvl+0x1e3/0x2cb [ 502.699830][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 502.705323][ T28] ? panic+0x764/0x764 [ 502.709418][ T28] ? llist_add_batch+0x160/0x1d0 [ 502.714402][ T28] ? vscnprintf+0x59/0x80 [ 502.718767][ T28] panic+0x318/0x764 [ 502.722692][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 502.728871][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 502.734275][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 502.740458][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 502.746735][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 502.752919][ T28] watchdog+0xfc7/0xfd0 [ 502.757116][ T28] ? watchdog+0x1f8/0xfd0 [ 502.761478][ T28] kthread+0x28d/0x320 [ 502.765567][ T28] ? hungtask_pm_notify+0x50/0x50 [ 502.770631][ T28] ? kthread_blkcg+0xd0/0xd0 [ 502.775244][ T28] ret_from_fork+0x1f/0x30 [ 502.779709][ T28] [ 502.783037][ T28] Kernel Offset: disabled [ 502.787402][ T28] Rebooting in 86400 seconds..