last executing test programs: 3m37.821764091s ago: executing program 2 (id=10): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000009c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc/swaps\x00', &(0x7f0000000b40)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./sys\x00', &(0x7f0000000cc0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f0000000d40)=""/10, 0x5b) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x4, &(0x7f0000000d80)) 3m36.529291951s ago: executing program 2 (id=12): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102400, 0x19000) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x5ada985dea50982f) bpf$PROG_LOAD(0x5, &(0x7f00000194c0)={0xb, 0x4, 0x0, &(0x7f00000195c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(r2, 0x0, 0x2, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000019640), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000019680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000196c0)='./sys\x00', &(0x7f0000019700)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019740)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r4, &(0x7f0000019780)="3197", 0x2) socket$nl_audit(0x10, 0x3, 0x9) setitimer(0x2, 0x0, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x10000, 0x0) getdents64(r5, &(0x7f0000000240)=""/256, 0x18) 3m35.239823597s ago: executing program 2 (id=14): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r3, &(0x7f0000001640)="8b", 0xffe4) add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x40, 0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) 3m32.972593523s ago: executing program 2 (id=15): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4aa40, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das1800\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x14b102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') pipe(0x0) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x40208, 0x1, 0xa1}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) 3m31.529000614s ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000003840)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f0000003880)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f00000038c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000003940), 0x0, 0x0) read$msr(r2, &(0x7f0000003980)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f000001c980)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, &(0x7f000001c9c0)="5a000300", 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f000001ca40), 0x8000) read(r5, &(0x7f000001ca80)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f000001cb80)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0x40045304, 0x0) tkill(r4, 0x7) syz_emit_ethernet(0x4e, &(0x7f000001cc80)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="68c200009078000003020000"], 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0xfc, {"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", 0x1000}}, 0x1006) 3m30.833687518s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000b40)="$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") gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_mount_image$hfsplus(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x2000010, &(0x7f0000001040)=ANY=[], 0x4, 0x6ee, &(0x7f0000001080)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001780)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000017c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001880)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001940), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x0, 0xc, &(0x7f0000001a40)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0xc, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000001bc0)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001c00)=@generic={&(0x7f0000001c40)='./file2\x00', 0x0, 0x10}, 0x18) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001c80)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001d00)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000002100)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r4, &(0x7f0000002140)={0x0, 0x9533, &(0x7f0000002180)=[{&(0x7f00000021c0)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m30.354674858s ago: executing program 2 (id=18): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000003c0)={0x1}) bind$inet6(r5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) writev(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) 3m29.900542563s ago: executing program 4 (id=5): r0 = fsopen(&(0x7f0000003d40)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000003d80)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003dc0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000003e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000003e80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003f00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000003f40), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003f80)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f0000004080)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3232c00, &(0x7f0000003c80)=ANY=[@ANYRESOCT=0x0, @ANYRES16], 0x0, 0xa8f, &(0x7f0000004900)="$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") r4 = syz_open_dev$video(&(0x7f00000053c0), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000005400), 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000005440)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000005480)=@userptr={0x0, 0x2, 0x2c, 0x100, 0x0, {}, {0x0, 0x0, 0x1, 0x2, 0x3, 0x4}, 0x0, 0x2, {&(0x7f0000005500)}, 0x400000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000005540)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004084) socket$inet_icmp(0x2, 0x2, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000004800)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000004880)='ip\x00', &(0x7f00000048c0)='127.0.0.1\x00', 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000004900)=ANY=[], 0xe2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) utime(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0xd, 0x80000000000008}) 3m27.073223483s ago: executing program 4 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) keyctl$get_persistent(0x16, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000019480)=r2, 0x12) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000019240)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000019280)='bridge0\x00', 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000019340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0xff}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000019440)={0x2, 0x4e2f, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000019980)=@arena={0x21, 0x0, 0x0, 0xa, 0x60400, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) 3m26.852270267s ago: executing program 0 (id=22): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, &(0x7f00000007c0)}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000940)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000ac0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000b00)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x21, 0x2}, &(0x7f00000007c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000b40)={0x0, 0x0, 0x10001, 0x5}) 3m24.906610541s ago: executing program 4 (id=23): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0xff) capset(0x0, &(0x7f0000000000)={0x1fffff, 0x201000, 0x7, 0x800, 0xfffffffc}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, 0x6e) r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000140)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='addr\x00', &(0x7f00000001c0)='127.0.0.1\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='clientaddr\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) rseq(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc0100, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x3) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000880)=ANY=[@ANYBLOB="01"]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m21.743047586s ago: executing program 0 (id=27): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000100)=0xfdfdfffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019280)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./tracefs_dir\x00', 0xbf) mount(0x0, &(0x7f0000019300)='./tracefs_dir\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019380)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) readv(r5, &(0x7f00000194c0)=[{&(0x7f0000019500)=""/4096, 0x1000}], 0x1) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f000001a500)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f000001a540)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) ppoll(&(0x7f000001a600)=[{r7, 0x80}], 0x1, &(0x7f000001a640), 0x0, 0x0) 3m19.263094043s ago: executing program 0 (id=29): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="f257a8ea7bc273dfaeab96", 0xb, 0x0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) creat(&(0x7f0000000940)='./file0\x00', 0xecf86c37d53049cc) r5 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/route\x00') pread64(r5, &(0x7f0000000b00)=""/102356, 0x18fd4, 0xc2a) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4029}], 0x1, 0x6) execve(&(0x7f0000019b00)='./file0\x00', 0x0, &(0x7f0000019b40)={[&(0x7f0000019b80)=' ']}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 3m14.602732535s ago: executing program 32 (id=18): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000003c0)={0x1}) bind$inet6(r5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) writev(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) 3m8.815811376s ago: executing program 33 (id=23): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0xff) capset(0x0, &(0x7f0000000000)={0x1fffff, 0x201000, 0x7, 0x800, 0xfffffffc}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, 0x6e) r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000140)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='addr\x00', &(0x7f00000001c0)='127.0.0.1\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='clientaddr\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) rseq(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc0100, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x3) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000880)=ANY=[@ANYBLOB="01"]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m3.93996217s ago: executing program 34 (id=29): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="f257a8ea7bc273dfaeab96", 0xb, 0x0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) creat(&(0x7f0000000940)='./file0\x00', 0xecf86c37d53049cc) r5 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/route\x00') pread64(r5, &(0x7f0000000b00)=""/102356, 0x18fd4, 0xc2a) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4029}], 0x1, 0x6) execve(&(0x7f0000019b00)='./file0\x00', 0x0, &(0x7f0000019b40)={[&(0x7f0000019b80)=' ']}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 20.575416365s ago: executing program 3 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001500add427323b472545b45602117fffffff81004e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mount(0x0, &(0x7f0000000580)='./trace\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101040) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, 0x0) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x3814050, &(0x7f0000000100)=ANY=[], 0x41, 0x14fe, &(0x7f0000004640)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3f, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000005b40)='./bus\x00', 0x24020, 0x0, 0x3, 0x0, &(0x7f0000005b80)) r6 = openat(0xffffffffffffff9c, &(0x7f0000005bc0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, 0x0) 18.69995189s ago: executing program 1 (id=187): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002540), 0x4000000004002, 0x0) dup(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x15, 0x400, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2f, 0x0, 0x0, @u32}]}, 0x1c}}, 0x10) bind$rds(r4, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, 0x0, 0x0, 0x8000, 0x6, 0x84e, 0x2f5, 0x10, 0x10000000000712}}], 0x58}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x4040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) 15.006721658s ago: executing program 1 (id=190): r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000005c0)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f00000195c0)='./file2\x00', 0x40, 0x0) mknod$loop(0x0, 0x1000, 0x0) mknod$loop(&(0x7f0000019680)='./file0\x00', 0x2000, 0x0) listen(r0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000019700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) capset(&(0x7f0000019780)={0x20080522}, &(0x7f00000197c0)={0x200000, 0x200006, 0xd, 0x0, 0x200007, 0x20}) r6 = syz_open_dev$sg(&(0x7f0000019800), 0x6f5e, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x40804) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sec\x00', &(0x7f0000000500)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x101002, 0x6e7cc56d49a80e4b) 14.271750624s ago: executing program 5 (id=191): mknodat(0xffffffffffffffff, 0x0, 0x80, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in6=@rand_addr=' \x01\x00', @in=@private=0xa010100, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}}, 0xb8}}, 0x80c4) mkdirat(0xffffffffffffff9c, 0x0, 0x110) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_clone3(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 14.268391388s ago: executing program 3 (id=192): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x20000014}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000540), 0x0) socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000040)={0x1, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setfsgid(0xee00) getpriority(0x2, r1) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x200002, 0x200003, 0x803, 0x4, 0x7}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x4, 0xc, &(0x7f0000002b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0)='tmpfs\x00', 0x2200cd0, 0x0) 12.611620522s ago: executing program 1 (id=193): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000003c0)=r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@private=0xa010102, 0x4f24, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x10, 0x6b654eecffb3ff31, 0x0, 0xee01}, {0xfffffffe, 0x0, 0xeda, 0x1, 0xfffffffffffffffb, 0x100000000000003, 0x9, 0x7}, {0x4800000, 0xfffffffffffffffe, 0x0, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x210000, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r1, &(0x7f00000005c0), 0x2e9, 0xffe0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) dup3(r2, r1, 0x80000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x11, r3, 0x0, 0x3, 0x0, 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r4, 0x29, 0x45, 0x0, &(0x7f0000000000)=0x1e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0xf}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c000280080001", @ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) 11.298356201s ago: executing program 5 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$kcm(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x840, &(0x7f0000000680)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000b80)=0x20, 0x4) write$binfmt_misc(r4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}], 0x18}, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) splice(r0, &(0x7f0000000540)=0x7, r5, &(0x7f00000005c0)=0x7, 0x200, 0xc) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x4) write(r6, &(0x7f0000000100)='3', 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x0, &(0x7f0000000240)='./sys/class/video4linux/video0/dev_debug\x00', 0x29, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) 11.100967858s ago: executing program 3 (id=195): syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2aa, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000003a80), &(0x7f0000003ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000003bc0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r5, r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, 0x0, 0x1) rename(0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000004300), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004340)='cgroup.controllers\x00', 0x275a, 0x0) 9.722891755s ago: executing program 5 (id=196): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001000)}, 0x400c0c0) open(0x0, 0x80242, 0x0) r5 = fsopen(&(0x7f0000001040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_mount_image$vfat(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000001280)='./file0\x00', 0x0, 0x2e40ab, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) getcwd(&(0x7f0000001300)=""/220, 0xdc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040804) 8.808799068s ago: executing program 3 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x1d) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@gettaction={0xb4, 0x32, 0x502, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffc00}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2404c084}, 0x20000084) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x4711, &(0x7f0000008f40)="$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") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) 7.049062012s ago: executing program 5 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./config\x00', &(0x7f00000009c0)='configfs\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000a80)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000b00)='./config/nullb/nullb1/power\x00', 0x80001, 0x42) write(r1, &(0x7f0000000b40)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='/dev/nullb1', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000c80)='1', 0x1) gettid() openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000d40)='loop', 0x4) symlinkat(&(0x7f0000000d80)='./config\x00', 0xffffffffffffff9c, &(0x7f0000000dc0)='./config/nullb/nullb1/power\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) write(r4, &(0x7f0000000e40)='transport=loop,nqn=testsubsys\n', 0x1e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x42}, 0x28) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.514390269s ago: executing program 3 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) prlimit64(0x0, 0xa, &(0x7f0000000040)={0x8, 0x7f}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x800810, &(0x7f0000000880)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f0000001a40)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") link(&(0x7f0000006b80)='./file1\x00', &(0x7f0000006bc0)='none\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006c00)='./file1\x00', 0xc4042, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000006c40), 0x6200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006c80)='./bus\x00', 0x140) chdir(&(0x7f0000006cc0)='./bus\x00') symlink(&(0x7f0000006d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000006e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendfile(r2, r3, 0x0, 0x20fffe82) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000940)={r4, &(0x7f0000000980), &(0x7f00000009c0)=""/86}, 0x20) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000cc0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@uid_forget}, {@noadinicb}, {@uid}, {@longad}, {@undelete}, {@unhide}, {@unhide}]}, 0x1, 0xc43, &(0x7f0000000d40)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000019c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x2000) 5.445375564s ago: executing program 1 (id=200): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc1) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000340)='.\x00', 0x0, 0x0) 3.324203717s ago: executing program 1 (id=201): syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000680)=0xffb) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214080, &(0x7f00000010c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',codepage=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000000004,iocharset=cp869,part=0x00000000000007ff,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c001e3e28a91e65f4b6fee1c7a6c09b5995076db3a85fb2e68c6b1bb3b8f154d729c8b7304bdf24bccf99dcfc40546f0c62da000001"], 0xff, 0x32e, &(0x7f00000011c0)="$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") syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f00000015c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) socket(0x28, 0x5, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='1', 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000380), 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x200}, 0x8) bind(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r4, &(0x7f0000000480)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r4, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000006c0)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf2, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x1000000000000006, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0xffffffffffff84d1, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000bc0)={{0x6, 0x1, 0x1, 0x3557, 'syz1\x00', 0x5}, 0x1, [0x2, 0x84, 0x1c00000000000003, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x400000000001, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0xfffffffffffffbb1, 0x5, 0x398, 0x101, 0x4, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x1, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x2000008, 0x129, 0x100000001, 0x81, 0x803, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x8401, 0xf, 0x4, 0x2c, 0x5, 0x7, 0x2, 0x3, 0x5, 0x6, 0xed, 0x9, 0x7, 0x3, 0x6, 0x500000000000004, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x5, 0x3, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x1, 0x400000000, 0x1403, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0xec8, 0x9, 0x200000005, 0x9, 0x1ff]}) 3.249600572s ago: executing program 5 (id=202): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000007c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r2, &(0x7f0000000880)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019880)='./file0\x00', 0x40, 0x16f) mount(&(0x7f00000198c0)=@filename='mtd0\x00', &(0x7f0000019900)='./file0\x00', &(0x7f0000019940)='jffs2\x00', 0x800000, 0x0) mount(0x0, &(0x7f0000019a40)='./file0\x00', &(0x7f0000019a80)='tmpfs\x00', 0x0, &(0x7f0000019ac0)='grpquota') 517.875975ms ago: executing program 1 (id=203): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc1) r6 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000340)='.\x00', 0x0, 0x0) 362.436257ms ago: executing program 3 (id=204): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0x4c) r0 = io_uring_setup(0x1, &(0x7f0000000240)={0x0, 0x0, 0x3800, 0x2}) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f00000002c0), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x28) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xfedd, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r3 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x1, 0x0, 0xa0801, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, [@multipath={0x0, 0x400, 0x0, 0xb0, 'multipath\x00', {'2 pg_init_delay_msecs 10', 0x20, '1 emc', 0x20, 0x1, 0x20, 0x1, [{0x20, 'round-robin 0', 0x20, 0x1, 0x20, '2', [{0x20, @ram={'/dev/ram', 0x1}, ' 1000 100'}]}]}}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./mnt\x00', 0x1ff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000fc0)={0x0}) mount(&(0x7f0000001000)=@filename='./dev/sda1\x00', &(0x7f0000001040)='./mnt\x00', &(0x7f0000001080)='ext4\x00', 0x8410, 0x0) 0s ago: executing program 5 (id=205): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000340)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 79.633599][ T5618] cgroup: Unknown subsys name 'net' [ 79.770197][ T5618] cgroup: Unknown subsys name 'cpuset' [ 79.779814][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.276864][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.485683][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.488743][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.490871][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.491301][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.492427][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.493306][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.505657][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.506052][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.507141][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.508560][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.509200][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.511709][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.525236][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.525642][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.552098][ T4947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.643428][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.654133][ T5653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.654219][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.655432][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.656328][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.657280][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.658024][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.698659][ T4947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.700598][ T4947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.701263][ T4947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.732147][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.734030][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.734512][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.738986][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.739638][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.187145][ T1927] cfg80211: failed to load regulatory.db [ 86.724635][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.736849][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.741885][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.918524][ T5639] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.947311][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.172715][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.203798][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.247308][ T1927] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.247772][ T5637] infiniband rxe0: set active [ 87.247790][ T5637] infiniband rxe0: added rxe_eth0 [ 87.265971][ T5637] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 87.266013][ T5637] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 87.266060][ T5637] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 87.304352][ T5637] RDS/IB: rxe0: added [ 87.304770][ T5637] smc: adding ib device rxe0 with port count 1 [ 87.304867][ T5637] smc: ib device rxe0 port 1 has no pnetid [ 87.330762][ T5642] rxe0: rxe_newlink: already configured on rxe_eth0 [ 87.346760][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.362774][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.605813][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.697244][ T5644] Bluetooth: hci2: command tx timeout [ 87.697384][ T5644] Bluetooth: hci1: command tx timeout [ 87.697490][ T5644] Bluetooth: hci0: command tx timeout [ 87.697737][ T5640] Bluetooth: hci3: command tx timeout [ 87.776566][ T4947] Bluetooth: hci4: command tx timeout [ 87.779078][ T5640] Bluetooth: hci5: command tx timeout [ 87.883958][ T5634] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.945678][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.947189][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.947659][ T5633] bridge_slave_0: entered allmulticast mode [ 87.949828][ T5633] bridge_slave_0: entered promiscuous mode [ 87.956420][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.956535][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.956803][ T5633] bridge_slave_1: entered allmulticast mode [ 87.958678][ T5633] bridge_slave_1: entered promiscuous mode [ 87.961486][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.961601][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.961787][ T5639] bridge_slave_0: entered allmulticast mode [ 87.964435][ T5639] bridge_slave_0: entered promiscuous mode [ 87.984705][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.984820][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.985567][ T5639] bridge_slave_1: entered allmulticast mode [ 87.991192][ T5639] bridge_slave_1: entered promiscuous mode [ 88.060276][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.065115][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.073178][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.078854][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.158631][ T5633] team0: Port device team_slave_0 added [ 88.162238][ T5639] team0: Port device team_slave_0 added [ 88.166141][ T5633] team0: Port device team_slave_1 added [ 88.192816][ T5639] team0: Port device team_slave_1 added [ 88.230785][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.230806][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.230836][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.231782][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.303609][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.303631][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.303662][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.326498][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.326520][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.326550][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.363271][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.363291][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.363320][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.520476][ T5633] hsr_slave_0: entered promiscuous mode [ 88.522261][ T5633] hsr_slave_1: entered promiscuous mode [ 88.550760][ T5639] hsr_slave_0: entered promiscuous mode [ 88.551886][ T5639] hsr_slave_1: entered promiscuous mode [ 88.552702][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 88.552767][ T5639] Cannot create hsr debugfs directory [ 88.656701][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.044487][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.401467][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.401579][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.402045][ T5634] bridge_slave_0: entered allmulticast mode [ 89.403874][ T5634] bridge_slave_0: entered promiscuous mode [ 89.433207][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.440590][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.441602][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.450786][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.455011][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.471706][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.472843][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.479408][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.480588][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.480768][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.480912][ T5634] bridge_slave_1: entered allmulticast mode [ 89.484268][ T5634] bridge_slave_1: entered promiscuous mode [ 89.630583][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.688049][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.776335][ T4947] Bluetooth: hci0: command tx timeout [ 89.776372][ T4947] Bluetooth: hci1: command tx timeout [ 89.776397][ T4947] Bluetooth: hci2: command tx timeout [ 89.776617][ T5640] Bluetooth: hci3: command tx timeout [ 89.781275][ T5634] team0: Port device team_slave_0 added [ 89.784624][ T5639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.790585][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.791557][ T5639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.803787][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.851320][ T5634] team0: Port device team_slave_1 added [ 89.856021][ T5644] Bluetooth: hci4: command tx timeout [ 89.856114][ T5640] Bluetooth: hci5: command tx timeout [ 89.874949][ T5639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.885240][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.887287][ T5639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.898485][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.939782][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.939804][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.939834][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.981095][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.981278][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.981428][ T5635] bridge_slave_0: entered allmulticast mode [ 89.983571][ T5635] bridge_slave_0: entered promiscuous mode [ 89.987633][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.987740][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.988190][ T5635] bridge_slave_1: entered allmulticast mode [ 89.989917][ T5635] bridge_slave_1: entered promiscuous mode [ 90.012503][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.012523][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.012554][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.094909][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.137287][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.235737][ T5634] hsr_slave_0: entered promiscuous mode [ 90.236845][ T5634] hsr_slave_1: entered promiscuous mode [ 90.237619][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 90.237641][ T5634] Cannot create hsr debugfs directory [ 90.251241][ T5635] team0: Port device team_slave_0 added [ 90.254485][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.254595][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.255061][ T5642] bridge_slave_0: entered allmulticast mode [ 90.259425][ T5642] bridge_slave_0: entered promiscuous mode [ 90.262388][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.262560][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.262697][ T5642] bridge_slave_1: entered allmulticast mode [ 90.264936][ T5642] bridge_slave_1: entered promiscuous mode [ 90.311481][ T5635] team0: Port device team_slave_1 added [ 90.389298][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.389320][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.389347][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.391712][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.391727][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.391753][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.513241][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.519330][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.604763][ T5642] team0: Port device team_slave_0 added [ 90.646400][ T5642] team0: Port device team_slave_1 added [ 90.677191][ T5635] hsr_slave_0: entered promiscuous mode [ 90.678018][ T5635] hsr_slave_1: entered promiscuous mode [ 90.678591][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 90.678612][ T5635] Cannot create hsr debugfs directory [ 90.678966][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.679317][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.679428][ T5637] bridge_slave_0: entered allmulticast mode [ 90.681036][ T5637] bridge_slave_0: entered promiscuous mode [ 90.748033][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.748147][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.748538][ T5637] bridge_slave_1: entered allmulticast mode [ 90.749949][ T5637] bridge_slave_1: entered promiscuous mode [ 90.751751][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.751766][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.751795][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.863378][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.863398][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.863434][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.887806][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.931301][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.935314][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.019642][ T5637] team0: Port device team_slave_0 added [ 91.052888][ T5637] team0: Port device team_slave_1 added [ 91.076870][ T5642] hsr_slave_0: entered promiscuous mode [ 91.077774][ T5642] hsr_slave_1: entered promiscuous mode [ 91.078400][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 91.078428][ T5642] Cannot create hsr debugfs directory [ 91.200825][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.200847][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.200880][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.211494][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.216751][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.220464][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.276739][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.276759][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.276790][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.284093][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.291231][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.338210][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.353832][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.354608][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.360288][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.388018][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.388149][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.462567][ T5637] hsr_slave_0: entered promiscuous mode [ 91.463464][ T5637] hsr_slave_1: entered promiscuous mode [ 91.464033][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 91.464054][ T5637] Cannot create hsr debugfs directory [ 91.499153][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.499359][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.631345][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.653440][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.658161][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.681243][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.684411][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.728732][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.732654][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.733471][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.740095][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.787198][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.835810][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.835916][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.856098][ T5644] Bluetooth: hci2: command tx timeout [ 91.856958][ T5644] Bluetooth: hci1: command tx timeout [ 91.856989][ T5644] Bluetooth: hci0: command tx timeout [ 91.857170][ T5640] Bluetooth: hci3: command tx timeout [ 91.891122][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.891265][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.933563][ T5642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.936114][ T4947] Bluetooth: hci4: command tx timeout [ 91.936204][ T5640] Bluetooth: hci5: command tx timeout [ 91.941917][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.942948][ T5642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.957443][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.997989][ T5642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.004046][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.047104][ T5642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.052543][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.210798][ T5637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.214785][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.232116][ T5637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.238679][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.244731][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.268267][ T5637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.273289][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.296679][ T5637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.312689][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.389893][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.393738][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.512388][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.512502][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.521634][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.546161][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.546267][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.591935][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.592063][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.594483][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.594585][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.834678][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.864255][ T5635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.018733][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.069628][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.094976][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.099981][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.100086][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.129174][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.129290][ T3373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.197945][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.232165][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.302227][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.302338][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.331974][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.332083][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.460224][ T5633] veth0_vlan: entered promiscuous mode [ 93.505016][ T5639] veth0_vlan: entered promiscuous mode [ 93.526314][ T5633] veth1_vlan: entered promiscuous mode [ 93.570858][ T5639] veth1_vlan: entered promiscuous mode [ 93.722720][ T5633] veth0_macvtap: entered promiscuous mode [ 93.790772][ T5633] veth1_macvtap: entered promiscuous mode [ 93.812445][ T5639] veth0_macvtap: entered promiscuous mode [ 93.853077][ T5639] veth1_macvtap: entered promiscuous mode [ 93.929787][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.935811][ T4947] Bluetooth: hci0: command tx timeout [ 93.935844][ T4947] Bluetooth: hci1: command tx timeout [ 93.935871][ T4947] Bluetooth: hci2: command tx timeout [ 93.935943][ T5640] Bluetooth: hci3: command tx timeout [ 94.002825][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.016967][ T5644] Bluetooth: hci4: command tx timeout [ 94.017019][ T5640] Bluetooth: hci5: command tx timeout [ 94.061188][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.129906][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.211502][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.216017][ T3373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.258545][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.287976][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.288885][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.288933][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.288975][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.378002][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.380417][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.380504][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.604840][ T663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.604866][ T663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.760287][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.760314][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.869019][ T5634] veth0_vlan: entered promiscuous mode [ 94.869672][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.869692][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.869954][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.869971][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.964258][ T5634] veth1_vlan: entered promiscuous mode [ 95.043224][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.062756][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.230583][ T5634] veth0_macvtap: entered promiscuous mode [ 95.286125][ T5634] veth1_macvtap: entered promiscuous mode [ 95.321357][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.442304][ T5642] veth0_vlan: entered promiscuous mode [ 95.472352][ T5635] veth0_vlan: entered promiscuous mode [ 95.481629][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.504083][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.508735][ T5642] veth1_vlan: entered promiscuous mode [ 95.611628][ T5873] 0x000000000003-0x000000010001 : "" [ 95.707656][ T5873] ftl_cs: FTL header corrupt! [ 96.373259][ T3373] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.373381][ T3373] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.385253][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.385314][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.498435][ T5635] veth1_vlan: entered promiscuous mode [ 96.706781][ T5642] veth0_macvtap: entered promiscuous mode [ 96.731615][ T5635] veth0_macvtap: entered promiscuous mode [ 97.690803][ T5642] veth1_macvtap: entered promiscuous mode [ 97.706348][ T5635] veth1_macvtap: entered promiscuous mode [ 97.850990][ T3373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.851016][ T3373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.912280][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.998150][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.025301][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.082715][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.082741][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.084159][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.156491][ T663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.157061][ T663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.230367][ T5637] veth0_vlan: entered promiscuous mode [ 98.304024][ T5637] veth1_vlan: entered promiscuous mode [ 99.350204][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.350231][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.369216][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369310][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369354][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369396][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369438][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369480][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.042828][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.042852][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.062873][ T985] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.139819][ T5637] veth0_macvtap: entered promiscuous mode [ 100.382420][ T5913] syz.2.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.106003][ T5637] veth1_macvtap: entered promiscuous mode [ 101.109682][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.109702][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.110032][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.110049][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.055092][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.093296][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.169765][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.278819][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.278942][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.278983][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.754446][ T5937] bridge0: port 3(netdevsim0) entered blocking state [ 103.755165][ T5937] bridge0: port 3(netdevsim0) entered disabled state [ 103.766614][ T5937] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 103.808982][ T5937] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 103.814367][ T5937] bridge0: port 3(netdevsim0) entered blocking state [ 103.814485][ T5937] bridge0: port 3(netdevsim0) entered forwarding state [ 103.928052][ T5907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.928092][ T5907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.592154][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.592179][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.450108][ T5952] loop0: detected capacity change from 0 to 512 [ 105.677652][ T5952] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 107.231740][ T5952] EXT4-fs (loop0): 1 truncate cleaned up [ 107.256916][ T5952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.780370][ T5970] loop4: detected capacity change from 0 to 2048 [ 107.804606][ T5970] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 107.804800][ T5970] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 109.341987][ T5642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.515694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.550005][ T5907] IPVS: starting estimator thread 0... [ 114.657609][ T6009] IPVS: using max 25 ests per chain, 60000 per kthread [ 115.595846][ T6015] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.598235][ T6015] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 117.089178][ T6023] warning: `syz.3.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.605677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.016056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.835498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.267888][ T6034] fuse: fd is not a fuse device [ 120.726699][ T6037] 9pnet_fd: p9_fd_create_unix (6037): problem connecting socket: ./file0: -111 [ 120.750146][ T6037] netlink: 'syz.5.31': attribute type 4 has an invalid length. [ 120.750231][ T6037] netlink: 'syz.5.31': attribute type 5 has an invalid length. [ 120.750278][ T6037] netlink: 'syz.5.31': attribute type 1 has an invalid length. [ 120.750319][ T6037] netlink: 'syz.5.31': attribute type 4 has an invalid length. [ 120.750361][ T6037] netlink: 'syz.5.31': attribute type 5 has an invalid length. [ 120.750428][ T6037] netlink: 'syz.5.31': attribute type 1 has an invalid length. [ 120.750639][ T6037] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 121.842175][ T6043] loop5: detected capacity change from 0 to 1024 [ 123.043968][ T5644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.047005][ T5644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.050074][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.057520][ T5644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.059142][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.464468][ T6053] loop5: detected capacity change from 0 to 128 [ 124.545597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 125.336361][ T5644] Bluetooth: hci6: command tx timeout [ 127.375488][ T5644] Bluetooth: hci6: command tx timeout [ 127.480702][ T5640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.495093][ T5640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.510307][ T5640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.521923][ T5640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.522581][ T5640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.591569][ T5640] Bluetooth: hci6: command tx timeout [ 129.615453][ T5640] Bluetooth: hci7: command tx timeout [ 129.907970][ T663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.282601][ T6046] rxe_eth0 speed is unknown, defaulting to 1000 [ 131.759337][ T5644] Bluetooth: hci7: command tx timeout [ 131.761980][ T5640] Bluetooth: hci6: command tx timeout [ 132.258263][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.258347][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.068700][ T663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.652030][ T663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.743056][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.744739][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.745279][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.769786][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.770584][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.775466][ T5640] Bluetooth: hci7: command tx timeout [ 133.881266][ T663] bridge0: port 3(netdevsim0) entered disabled state [ 133.952500][ T663] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 133.952529][ T663] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 133.953631][ T663] bridge0: port 3(netdevsim0) entered disabled state [ 134.068190][ T663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.675025][ T6074] rxe_eth0 speed is unknown, defaulting to 1000 [ 134.783406][ T30] audit: type=1804 audit(1793389366.189:2): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.38" name="/newroot/11/file1" dev="fuse" ino=1 res=1 errno=0 [ 135.313096][ T6130] loop3: detected capacity change from 0 to 1024 [ 135.370367][ T663] bridge_slave_1: left allmulticast mode [ 135.370408][ T663] bridge_slave_1: left promiscuous mode [ 135.371351][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.424521][ T663] bridge_slave_0: left allmulticast mode [ 135.424548][ T663] bridge_slave_0: left promiscuous mode [ 135.424798][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.519665][ T6134] ======================================================= [ 135.519665][ T6134] WARNING: The mand mount option has been deprecated and [ 135.519665][ T6134] and is ignored by this kernel. Remove the mand [ 135.519665][ T6134] option from the mount to silence this warning. [ 135.519665][ T6134] ======================================================= [ 135.539640][ T6134] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.356096][ T5644] Bluetooth: hci7: command tx timeout [ 136.356167][ T5640] Bluetooth: hci2: command tx timeout [ 136.596537][ T6141] loop1: detected capacity change from 0 to 128 [ 136.964195][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.46'. [ 137.080080][ T6145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.700109][ T6141] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 137.700138][ T6141] FAT-fs (loop1): data area starts beyond volume (36 > 11) [ 137.700153][ T6141] FAT-fs (loop1): Can't find a valid FAT filesystem [ 138.417142][ T5640] Bluetooth: hci2: command tx timeout [ 140.357468][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.385254][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.402807][ T663] bond0 (unregistering): Released all slaves [ 140.495409][ T5640] Bluetooth: hci2: command tx timeout [ 140.809765][ T6163] loop5: detected capacity change from 0 to 32768 [ 140.881306][ T6163] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.955094][ T6163] XFS (loop5): Ending clean mount [ 140.970863][ T6163] XFS (loop5): Quotacheck needed: Please wait. [ 141.551391][ T6175] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 142.648151][ T5640] Bluetooth: hci2: command tx timeout [ 142.876741][ T6163] XFS (loop5): Quotacheck: Done. [ 143.281094][ T30] audit: type=1800 audit(1793389374.639:3): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.51" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=-22 [ 144.156552][ T5637] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.318342][ T6188] capability: warning: `syz.5.55' uses 32-bit capabilities (legacy support in use) [ 146.382965][ T6114] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.410166][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 154.692723][ T663] hsr_slave_0: left promiscuous mode [ 154.701701][ T663] hsr_slave_1: left promiscuous mode [ 154.704672][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.704705][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.733349][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.733375][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.794438][ T663] veth1_macvtap: left promiscuous mode [ 154.794501][ T663] veth0_macvtap: left promiscuous mode [ 154.805124][ T663] veth1_vlan: left promiscuous mode [ 154.805267][ T663] veth0_vlan: left promiscuous mode [ 155.265512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 156.471484][ T30] audit: type=1400 audit(1793389386.809:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="f/o" pid=6240 comm="syz.3.62" [ 158.306072][ T663] team0 (unregistering): Port device team_slave_1 removed [ 158.360673][ T663] team0 (unregistering): Port device team_slave_0 removed [ 159.438437][ T6255] capability: warning: `syz.3.63' uses deprecated v2 capabilities in a way that may be insecure [ 161.575828][ T6247] tipc: Started in network mode [ 161.575863][ T6247] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 161.576340][ T6247] tipc: Enabled bearer , priority 1 [ 161.577567][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.577676][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.577810][ T6046] bridge_slave_0: entered allmulticast mode [ 161.582822][ T6046] bridge_slave_0: entered promiscuous mode [ 161.590282][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.590396][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.592498][ T6046] bridge_slave_1: entered allmulticast mode [ 161.594437][ T6046] bridge_slave_1: entered promiscuous mode [ 161.638618][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.642567][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.997402][ T6263] syz_tun: entered allmulticast mode [ 162.067626][ T6046] team0: Port device team_slave_0 added [ 162.240631][ T6046] team0: Port device team_slave_1 added [ 163.625431][ T6277] loop1: detected capacity change from 0 to 128 [ 165.345628][ T6280] IPVS: ip_vs_add_dest(): server weight less than zero [ 165.569553][ T6277] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 166.273698][ T6277] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.573835][ T5767] tipc: Node number set to 43690 [ 166.644881][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.644904][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.644936][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.699864][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.699886][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.699918][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.801702][ T5634] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.960616][ T6288] loop3: detected capacity change from 0 to 64 [ 166.961733][ T6288] hfs: Unknown parameter '' [ 170.754310][ T30] audit: type=1400 audit(1793389401.149:5): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=6299 comm="syz.1.69" [ 170.936525][ T6046] hsr_slave_0: entered promiscuous mode [ 170.938648][ T6046] hsr_slave_1: entered promiscuous mode [ 170.939758][ T6046] debugfs: 'hsr0' already exists in 'hsr' [ 170.939776][ T6046] Cannot create hsr debugfs directory [ 171.103401][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.103527][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.103679][ T6074] bridge_slave_0: entered allmulticast mode [ 171.133045][ T6074] bridge_slave_0: entered promiscuous mode [ 171.151862][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.155065][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.155239][ T6074] bridge_slave_1: entered allmulticast mode [ 171.183247][ T6074] bridge_slave_1: entered promiscuous mode [ 171.208053][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.208168][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.208307][ T6114] bridge_slave_0: entered allmulticast mode [ 171.209948][ T6114] bridge_slave_0: entered promiscuous mode [ 171.438517][ T663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.642067][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.642178][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.642296][ T6114] bridge_slave_1: entered allmulticast mode [ 171.669249][ T6114] bridge_slave_1: entered promiscuous mode [ 171.734133][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 171.756325][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.793954][ T6114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.971767][ T663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.070671][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.087990][ T6114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.449589][ T6074] team0: Port device team_slave_0 added [ 173.362438][ T6114] team0: Port device team_slave_0 added [ 173.437263][ T6074] team0: Port device team_slave_1 added [ 173.541057][ T663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.790510][ T6325] loop5: detected capacity change from 0 to 32768 [ 173.835074][ T6325] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.869186][ T6325] XFS (loop5): Ending clean mount [ 173.871676][ T6325] XFS (loop5): Quotacheck needed: Please wait. [ 173.888136][ T6114] team0: Port device team_slave_1 added [ 174.031426][ T6325] XFS (loop5): Quotacheck: Done. [ 174.254950][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.254972][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.255003][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.032520][ T5637] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.071675][ T663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.112960][ T6114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.112982][ T6114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.113014][ T6114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.114644][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.114659][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.114690][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.132163][ T6340] nvme_fabrics: unknown parameter or missing value 'trsvcid=' in ctrl creation request [ 175.267470][ T6341] Zero length message leads to an empty skb [ 175.326278][ T6341] fuse: Bad value for 'fd' [ 175.520481][ T6114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.520503][ T6114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.520535][ T6114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.125104][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'. [ 179.635979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 180.045511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 180.279473][ T6074] hsr_slave_0: entered promiscuous mode [ 180.282173][ T6074] hsr_slave_1: entered promiscuous mode [ 180.282947][ T6074] debugfs: 'hsr0' already exists in 'hsr' [ 180.282969][ T6074] Cannot create hsr debugfs directory [ 180.322387][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 180.393903][ T6114] hsr_slave_0: entered promiscuous mode [ 180.405253][ T6114] hsr_slave_1: entered promiscuous mode [ 180.416744][ T6114] debugfs: 'hsr0' already exists in 'hsr' [ 180.416772][ T6114] Cannot create hsr debugfs directory [ 180.702168][ T6369] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.704619][ T6369] block device autoloading is deprecated and will be removed. [ 183.424462][ T6383] program syz.3.82 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.693034][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.703839][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.715657][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.717842][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.718488][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.433927][ T6392] loop1: detected capacity change from 0 to 512 [ 185.477683][ T663] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.691487][ T6392] EXT4-fs (loop1): 1 truncate cleaned up [ 185.800959][ T6392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.738027][ T5640] Bluetooth: hci4: command tx timeout [ 187.358902][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.669708][ T6408] loop5: detected capacity change from 0 to 256 [ 187.729378][ T663] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.815416][ T5640] Bluetooth: hci4: command tx timeout [ 189.441453][ T663] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.318995][ T6114] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 190.366757][ T6114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.367934][ T6114] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 192.212361][ T5640] Bluetooth: hci4: command tx timeout [ 192.246906][ T6114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.268245][ T6114] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 192.340799][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.341959][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.376490][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.395711][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.396433][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.539337][ T6114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.763821][ T663] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.091813][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 193.276252][ T6385] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.697137][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.697209][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.265480][ T5644] Bluetooth: hci4: command tx timeout [ 194.677073][ T5644] Bluetooth: hci5: command tx timeout [ 194.954136][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.960197][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.964675][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.966309][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.967069][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.827498][ T5640] Bluetooth: hci5: command tx timeout [ 197.058921][ T5640] Bluetooth: hci6: command tx timeout [ 197.244087][ T663] bridge_slave_1: left allmulticast mode [ 197.244119][ T663] bridge_slave_1: left promiscuous mode [ 197.244361][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.965679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 198.286608][ T663] bridge_slave_0: left allmulticast mode [ 198.286642][ T663] bridge_slave_0: left promiscuous mode [ 198.286891][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.879499][ T6463] loop5: detected capacity change from 0 to 764 [ 198.895403][ T5640] Bluetooth: hci5: command tx timeout [ 198.987275][ T663] bridge_slave_1: left allmulticast mode [ 198.987309][ T663] bridge_slave_1: left promiscuous mode [ 198.987639][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.048046][ T663] bridge_slave_0: left allmulticast mode [ 199.048071][ T663] bridge_slave_0: left promiscuous mode [ 199.048230][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.155435][ T5640] Bluetooth: hci6: command tx timeout [ 199.408032][ T6465] isofs: Unable to find the "." directory for NFS. [ 200.723030][ T6467] loop5: detected capacity change from 0 to 512 [ 200.958219][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.976775][ T5640] Bluetooth: hci5: command tx timeout [ 200.998801][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.019618][ T663] bond0 (unregistering): Released all slaves [ 201.228480][ T5640] Bluetooth: hci6: command tx timeout [ 201.733066][ T5640] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 201.734880][ T5640] Bluetooth: hci3: Injecting HCI hardware error event [ 201.737732][ T5640] Bluetooth: hci3: hardware error 0x00 [ 202.207546][ T6472] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.716444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 203.915516][ T5644] Bluetooth: hci6: command tx timeout [ 203.954961][ T6472] input: syz0 as /devices/virtual/input/input5 [ 204.201478][ T6472] program syz.5.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.257251][ T5640] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.459799][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.479697][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.495103][ T663] bond0 (unregistering): Released all slaves [ 206.126910][ T6492] loop5: detected capacity change from 0 to 256 [ 206.130243][ T6497] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 206.247854][ T6492] exfat: Unknown parameter '1 [ 206.247854][ T6492] 13 bridge0 1 0 3333ff00000c [ 206.247854][ T6492] 13 bridge0 1 0 3333ffaaaa0c [ 206.247854][ T6492] 15 bond0 3 0 333300000001 [ 206.247854][ T6492] 15 bond0 3 0 01005e000001 [ 206.247854][ T6492] 15 bond0 3 0 3333f' [ 207.106497][ T6508] loop1: detected capacity change from 0 to 512 [ 207.124357][ T6508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.234238][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.234328][ T6508] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.781334][ T6425] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.456490][ T6524] CIFS mount error: No usable UNC path provided in device string! [ 209.456490][ T6524] [ 209.456510][ T6524] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 211.137664][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 211.137741][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 212.159374][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.160105][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.160264][ T6385] bridge_slave_0: entered allmulticast mode [ 212.188151][ T6385] bridge_slave_0: entered promiscuous mode [ 212.210772][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.211090][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.211228][ T6385] bridge_slave_1: entered allmulticast mode [ 212.244441][ T6385] bridge_slave_1: entered promiscuous mode [ 213.477896][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 213.771857][ T6447] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.791262][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.921970][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.061163][ T6385] team0: Port device team_slave_0 added [ 217.103863][ T6385] team0: Port device team_slave_1 added [ 217.620515][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.620531][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.620553][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.623916][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.623931][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.623961][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.750843][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.517683][ T6385] hsr_slave_0: entered promiscuous mode [ 219.623519][ T30] audit: type=1400 audit(1793389451.029:6): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6570 comm="syz.1.106" [ 219.721752][ T6385] hsr_slave_1: entered promiscuous mode [ 219.765771][ T6385] debugfs: 'hsr0' already exists in 'hsr' [ 219.765881][ T6385] Cannot create hsr debugfs directory [ 220.758151][ T663] hsr_slave_0: left promiscuous mode [ 220.761040][ T663] hsr_slave_1: left promiscuous mode [ 220.761794][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.761812][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.763620][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.763666][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.712393][ T663] hsr_slave_0: left promiscuous mode [ 221.722525][ T663] hsr_slave_1: left promiscuous mode [ 221.723471][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.723499][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.714800][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.714828][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.938835][ T663] veth1_macvtap: left promiscuous mode [ 222.938880][ T663] veth0_macvtap: left promiscuous mode [ 222.938990][ T663] veth1_vlan: left promiscuous mode [ 222.939062][ T663] veth0_vlan: left promiscuous mode [ 222.971519][ T663] veth1_macvtap: left promiscuous mode [ 222.971666][ T663] veth0_macvtap: left promiscuous mode [ 222.971749][ T663] veth1_vlan: left promiscuous mode [ 222.971804][ T663] veth0_vlan: left promiscuous mode [ 223.089512][ T30] audit: type=1800 audit(1793389454.499:7): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.104" name=08 dev="sda1" ino=2058 res=0 errno=-22 [ 223.569288][ T6600] process 'syz.1.109' launched './file2' with NULL argv: empty string added [ 224.628430][ T663] team0 (unregistering): Port device team_slave_1 removed [ 224.846255][ T663] team0 (unregistering): Port device team_slave_0 removed [ 226.548937][ T663] team0 (unregistering): Port device team_slave_1 removed [ 226.577241][ T663] team0 (unregistering): Port device team_slave_0 removed [ 227.566864][ T6608] slcan: can't register candev [ 227.690302][ T6624] loop1: detected capacity change from 0 to 512 [ 227.696806][ T6624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 227.802319][ T6624] EXT4-fs (loop1): 1 truncate cleaned up [ 227.815656][ T6624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.861207][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 228.080468][ T6635] 0x000000000003-0x000000010001 : "" [ 228.104979][ T6635] ftl_cs: FTL header corrupt! [ 229.409114][ T6645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.329469][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.875794][ T6659] overlayfs: failed to resolve './file1': -2 [ 233.672427][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.672723][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.672858][ T6425] bridge_slave_0: entered allmulticast mode [ 233.674695][ T6425] bridge_slave_0: entered promiscuous mode [ 233.714580][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.714688][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.714821][ T6425] bridge_slave_1: entered allmulticast mode [ 233.741174][ T6425] bridge_slave_1: entered promiscuous mode [ 233.793389][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.809122][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.101126][ T6678] netlink: 'syz.5.122': attribute type 2 has an invalid length. [ 234.101193][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.122'. [ 234.453242][ T30] audit: type=1800 audit(1793389465.859:8): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.121" name=08 dev="sda1" ino=2058 res=0 errno=-22 [ 237.142638][ T6425] team0: Port device team_slave_0 added [ 237.641921][ T6425] team0: Port device team_slave_1 added [ 237.664577][ T6698] loop5: detected capacity change from 0 to 512 [ 237.933985][ T6698] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 238.631683][ T6698] EXT4-fs (loop5): 1 truncate cleaned up [ 238.663232][ T6698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.024698][ T6708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 239.796375][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.796539][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.796681][ T6447] bridge_slave_0: entered allmulticast mode [ 239.869958][ T6447] bridge_slave_0: entered promiscuous mode [ 239.882386][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.882497][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.882639][ T6447] bridge_slave_1: entered allmulticast mode [ 239.908439][ T6447] bridge_slave_1: entered promiscuous mode [ 240.065919][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.132744][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.132766][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.132796][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.205970][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.205991][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.206022][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.294206][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.308838][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.378764][ T6447] team0: Port device team_slave_0 added [ 241.434773][ T6447] team0: Port device team_slave_1 added [ 242.631700][ T6425] hsr_slave_0: entered promiscuous mode [ 242.633218][ T6425] hsr_slave_1: entered promiscuous mode [ 242.633978][ T6425] debugfs: 'hsr0' already exists in 'hsr' [ 242.634006][ T6425] Cannot create hsr debugfs directory [ 242.820700][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.130'. [ 242.990413][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.990434][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.990466][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.036425][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 243.061432][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.066168][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.074212][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.089125][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.089769][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.196653][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.196675][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.196707][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.439550][ T6447] hsr_slave_0: entered promiscuous mode [ 243.442199][ T6447] hsr_slave_1: entered promiscuous mode [ 243.444522][ T6447] debugfs: 'hsr0' already exists in 'hsr' [ 243.444545][ T6447] Cannot create hsr debugfs directory [ 244.059463][ T6744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.615238][ T5640] Bluetooth: hci2: command tx timeout [ 246.367114][ T6766] dummy0: mtu less than device minimum [ 246.516356][ T663] bridge_slave_1: left allmulticast mode [ 246.516386][ T663] bridge_slave_1: left promiscuous mode [ 246.516657][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.577264][ T663] bridge_slave_0: left allmulticast mode [ 246.577297][ T663] bridge_slave_0: left promiscuous mode [ 246.577532][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.669278][ T663] bridge_slave_1: left allmulticast mode [ 246.669310][ T663] bridge_slave_1: left promiscuous mode [ 246.669505][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.812755][ T30] audit: type=1800 audit(1793389478.149:9): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.134" name=08 dev="sda1" ino=2058 res=0 errno=-22 [ 247.639237][ T663] bridge_slave_0: left allmulticast mode [ 247.639268][ T663] bridge_slave_0: left promiscuous mode [ 247.639472][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.724408][ T5644] Bluetooth: hci2: command tx timeout [ 247.733203][ T663] bridge_slave_1: left allmulticast mode [ 247.733230][ T663] bridge_slave_1: left promiscuous mode [ 247.733436][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.756935][ T663] bridge_slave_0: left allmulticast mode [ 247.756962][ T663] bridge_slave_0: left promiscuous mode [ 247.757195][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.951679][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.954715][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.978414][ T663] bond0 (unregistering): Released all slaves [ 248.074527][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.098637][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.100389][ T663] bond0 (unregistering): Released all slaves [ 248.203128][ T6781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 248.203156][ T6781] block device autoloading is deprecated and will be removed. [ 249.252522][ T6787] 9p: Bad value for 'rfdno' [ 249.817055][ T5644] Bluetooth: hci2: command tx timeout [ 249.820543][ T6783] syz.1.135 (6783) used greatest stack depth: 17992 bytes left [ 249.975481][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.976612][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.977188][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.978121][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.978750][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.200318][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.866075][ T5640] Bluetooth: hci2: command tx timeout [ 252.015371][ T5644] Bluetooth: hci4: command tx timeout [ 252.026267][ T6800] loop3: detected capacity change from 0 to 512 [ 252.043733][ T6800] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 252.068508][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.122320][ T663] bond0 (unregistering): Released all slaves [ 252.138061][ T6800] EXT4-fs (loop3): 1 truncate cleaned up [ 252.167423][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.338139][ T6807] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 252.963075][ T6730] rxe_eth0 speed is unknown, defaulting to 1000 [ 253.235243][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 253.235979][ T6806] 8021q: VLANs not supported on xfrm0 [ 253.429721][ T30] audit: type=1800 audit(1793389484.699:10): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 253.857825][ T6815] netlink: 32 bytes leftover after parsing attributes in process `syz.5.142'. [ 253.881639][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.993734][ T5640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.999917][ T5640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.003208][ T5640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.027160][ T5640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.033326][ T5640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.097841][ T5644] Bluetooth: hci4: command tx timeout [ 255.371128][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.371191][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.345826][ T5644] Bluetooth: hci7: command tx timeout [ 257.346606][ T5640] Bluetooth: hci4: command tx timeout [ 257.348874][ T6843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.796364][ T6848] dummy0: mtu less than device minimum [ 258.276012][ T6790] rxe_eth0 speed is unknown, defaulting to 1000 [ 260.607137][ T5640] Bluetooth: hci4: command tx timeout [ 260.607179][ T5640] Bluetooth: hci7: command tx timeout [ 260.950934][ T6876] null_blk: nullb1: using native zone append [ 261.380299][ T6876] null_blk: disk nullb1 created [ 261.823686][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 262.669572][ T5644] Bluetooth: hci7: command tx timeout [ 262.787768][ T6903] loop1: detected capacity change from 0 to 4096 [ 262.841542][ T6903] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 263.356016][ T6903] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 264.327714][ T6818] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.617698][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.617822][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.617973][ T6730] bridge_slave_0: entered allmulticast mode [ 264.659710][ T6730] bridge_slave_0: entered promiscuous mode [ 264.735473][ T5644] Bluetooth: hci7: command tx timeout [ 264.761406][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.761535][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.761690][ T6730] bridge_slave_1: entered allmulticast mode [ 264.774026][ T6730] bridge_slave_1: entered promiscuous mode [ 265.114865][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.179167][ T30] audit: type=1800 audit(1793389496.569:11): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.146" name=08 dev="sda1" ino=2058 res=0 errno=-22 [ 265.287620][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.300277][ T6730] team0: Port device team_slave_0 added [ 268.448641][ T663] hsr_slave_0: left promiscuous mode [ 268.452197][ T663] hsr_slave_1: left promiscuous mode [ 268.453181][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.475644][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.119157][ T5767] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 270.160788][ T663] hsr_slave_0: left promiscuous mode [ 270.170888][ T663] hsr_slave_1: left promiscuous mode [ 270.171798][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.191664][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.235951][ T663] hsr_slave_0: left promiscuous mode [ 270.244029][ T663] hsr_slave_1: left promiscuous mode [ 270.250445][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.265897][ T5767] usb 2-1: device descriptor read/64, error -71 [ 270.274436][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.791476][ T663] team0 (unregistering): Port device team_slave_1 removed [ 272.097096][ T6958] loop1: detected capacity change from 0 to 1024 [ 274.376833][ T663] team0 (unregistering): Port device team_slave_0 removed [ 275.902565][ T30] audit: type=1800 audit(1793389507.309:12): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.162" name=08 dev="sda1" ino=2058 res=0 errno=-22 [ 275.945049][ T663] team0 (unregistering): Port device team_slave_1 removed [ 275.989582][ T663] team0 (unregistering): Port device team_slave_0 removed [ 276.503510][ T663] team0 (unregistering): Port device team_slave_1 removed [ 276.518474][ T663] team0 (unregistering): Port device team_slave_0 removed [ 276.657659][ T6730] team0: Port device team_slave_1 added [ 276.723677][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 276.781736][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.781757][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.781788][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.783728][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.783742][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.783768][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.085869][ T6730] hsr_slave_0: entered promiscuous mode [ 277.087084][ T6730] hsr_slave_1: entered promiscuous mode [ 277.088342][ T6730] debugfs: 'hsr0' already exists in 'hsr' [ 277.088364][ T6730] Cannot create hsr debugfs directory [ 278.368220][ T7010] overlayfs: failed to resolve './file1': -2 [ 279.154633][ T7017] loop3: detected capacity change from 0 to 512 [ 279.166290][ T7017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.168587][ T7017] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 279.212236][ T7017] EXT4-fs (loop3): 1 truncate cleaned up [ 279.232390][ T7017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.251384][ T7024] loop5: detected capacity change from 0 to 2048 [ 279.299532][ T7027] syz.1.167 uses obsolete (PF_INET,SOCK_PACKET) [ 279.344089][ T7024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.366549][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.366669][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.366821][ T6790] bridge_slave_0: entered allmulticast mode [ 280.378166][ T6790] bridge_slave_0: entered promiscuous mode [ 280.682642][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.682729][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.682859][ T6790] bridge_slave_1: entered allmulticast mode [ 281.510773][ T30] audit: type=1800 audit(1793389512.919:13): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.166" name="file1" dev="loop5" ino=15 res=0 errno=-4 [ 281.550712][ T6790] bridge_slave_1: entered promiscuous mode [ 281.640298][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.929013][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.287894][ T7047] loop3: detected capacity change from 0 to 32768 [ 282.313839][ T7047] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 282.529447][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.521502][ T7047] XFS (loop3): Ending clean mount [ 283.531627][ T7047] XFS (loop3): Quotacheck needed: Please wait. [ 283.619140][ T7047] XFS (loop3): Quotacheck: Done. [ 284.849454][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.099504][ T5633] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 285.226727][ T6790] team0: Port device team_slave_0 added [ 285.226959][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.227081][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.227215][ T6818] bridge_slave_0: entered allmulticast mode [ 285.230821][ T6818] bridge_slave_0: entered promiscuous mode [ 285.274979][ T6790] team0: Port device team_slave_1 added [ 285.275189][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.275352][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.275491][ T6818] bridge_slave_1: entered allmulticast mode [ 285.324218][ T6818] bridge_slave_1: entered promiscuous mode [ 285.332069][ T7067] loop5: detected capacity change from 0 to 1024 [ 285.699367][ T6818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.701495][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.701510][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.701541][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.720119][ T6818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.990839][ T7076] netlink: 'syz.5.172': attribute type 9 has an invalid length. [ 285.990916][ T7076] netlink: 'syz.5.172': attribute type 7 has an invalid length. [ 285.990963][ T7076] netlink: 'syz.5.172': attribute type 8 has an invalid length. [ 286.008845][ T7076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 287.082082][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.082108][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.082139][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.562872][ T6818] team0: Port device team_slave_0 added [ 288.601502][ T6818] team0: Port device team_slave_1 added [ 288.903053][ T7095] loop1: detected capacity change from 0 to 32768 [ 288.924384][ T7095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.176 (7095) [ 288.956717][ T7095] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.956751][ T7095] BTRFS info (device loop1): using crc32c checksum algorithm [ 289.416105][ T7095] BTRFS info (device loop1): enabling ssd optimizations [ 289.416130][ T7095] BTRFS info (device loop1): turning on flush-on-commit [ 289.416144][ T7095] BTRFS info (device loop1): enabling free space tree [ 289.416157][ T7095] BTRFS info (device loop1): enabling auto defrag [ 289.416172][ T7095] BTRFS info (device loop1): use lzo compression, level 1 [ 289.416189][ T7095] BTRFS info (device loop1): max_inline set to 0 [ 289.764708][ T6790] hsr_slave_0: entered promiscuous mode [ 289.786067][ T6790] hsr_slave_1: entered promiscuous mode [ 289.788862][ T6790] debugfs: 'hsr0' already exists in 'hsr' [ 289.788880][ T6790] Cannot create hsr debugfs directory [ 289.793815][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.793827][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.793849][ T6818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.926048][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.926071][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.926103][ T6818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.220217][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 290.294596][ T5634] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.822947][ T7135] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 291.885164][ T7136] netlink: 'syz.3.180': attribute type 2 has an invalid length. [ 291.893860][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'. [ 291.931587][ T7122] loop5: detected capacity change from 0 to 128 [ 291.994537][ T7122] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 292.264772][ T6818] hsr_slave_0: entered promiscuous mode [ 292.280121][ T6818] hsr_slave_1: entered promiscuous mode [ 292.290784][ T6818] debugfs: 'hsr0' already exists in 'hsr' [ 292.290803][ T6818] Cannot create hsr debugfs directory [ 293.365453][ T30] audit: type=1800 audit(1793389524.369:14): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.182" name="file0" dev="overlay" ino=339 res=0 errno=-22 [ 293.499826][ T6730] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 293.522731][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.674045][ T6730] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 293.702892][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.716907][ T6730] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 293.735166][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.064786][ T7155] loop5: detected capacity change from 0 to 512 [ 295.526699][ T7155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.601595][ T7155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.601718][ T7155] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.657368][ T6730] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 295.673817][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.692311][ T7161] loop1: detected capacity change from 0 to 128 [ 297.346655][ T30] audit: type=1326 audit(1793389527.639:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.1.185" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f779e99f559 code=0x0 [ 298.198892][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.320129][ T663] bridge_slave_1: left allmulticast mode [ 298.320153][ T663] bridge_slave_1: left promiscuous mode [ 298.320317][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.347226][ T663] bridge_slave_0: left allmulticast mode [ 298.347245][ T663] bridge_slave_0: left promiscuous mode [ 298.347523][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.699196][ T663] bridge_slave_1: left allmulticast mode [ 298.699281][ T663] bridge_slave_1: left promiscuous mode [ 298.700360][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.793133][ T663] bridge_slave_0: left allmulticast mode [ 298.793219][ T663] bridge_slave_0: left promiscuous mode [ 298.821148][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.169318][ T663] bridge_slave_1: left allmulticast mode [ 299.169409][ T663] bridge_slave_1: left promiscuous mode [ 299.170503][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.231380][ T663] bridge_slave_0: left allmulticast mode [ 299.231469][ T663] bridge_slave_0: left promiscuous mode [ 299.232540][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.670177][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.684707][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.696488][ T663] bond0 (unregistering): Released all slaves [ 299.903447][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.914855][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.924995][ T663] bond0 (unregistering): Released all slaves [ 300.138464][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.143323][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.185039][ T663] bond0 (unregistering): Released all slaves [ 300.261064][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 301.078970][ T7195] loop3: detected capacity change from 0 to 256 [ 301.085528][ T7195] exfat: Unknown parameter '' [ 302.359965][ T7198] program syz.1.190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.953171][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.959282][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.959967][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.965462][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.966105][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.994819][ T7212] loop5: detected capacity change from 0 to 128 [ 305.010684][ T7212] EXT4-fs (loop5): Test dummy encryption mode enabled [ 305.093315][ T7212] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.096218][ T7212] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.423027][ T7222] loop3: detected capacity change from 0 to 128 [ 306.082856][ T7222] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 306.082892][ T7222] FAT-fs (loop3): data area starts beyond volume (36 > 11) [ 306.082911][ T7222] FAT-fs (loop3): Can't find a valid FAT filesystem [ 307.088124][ T5644] Bluetooth: hci5: command tx timeout [ 307.372358][ T5637] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.733143][ T7245] loop3: detected capacity change from 0 to 32768 [ 308.751940][ T7245] (syz.3.197,7245,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 308.753230][ T7245] (syz.3.197,7245,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 308.754408][ T7245] (syz.3.197,7245,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 308.936165][ T7245] JBD2: Ignoring recovery information on journal [ 309.036366][ T7245] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 309.145889][ T5644] Bluetooth: hci5: command tx timeout [ 309.403972][ T7255] nvmet: adding nsid 1 to subsystem testsubsys [ 309.547428][ T7256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.793302][ T5633] ocfs2: Unmounting device (7,3) on (node local) [ 309.966145][ T6818] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 310.069516][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.130313][ T6818] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 310.200618][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.214062][ T7213] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.221443][ T6818] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 310.243088][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.246984][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.248139][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.251129][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.252572][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.347866][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.352405][ T6818] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 310.604092][ T7266] loop3: detected capacity change from 0 to 32768 [ 310.609315][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.613386][ T7266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.199 (7266) [ 310.682235][ T7266] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 310.682273][ T7266] BTRFS info (device loop3): using crc32c checksum algorithm [ 310.809590][ T7266] BTRFS info (device loop3): enabling ssd optimizations [ 310.809620][ T7266] BTRFS info (device loop3): turning on flush-on-commit [ 310.809640][ T7266] BTRFS info (device loop3): enabling free space tree [ 310.809658][ T7266] BTRFS info (device loop3): enabling auto defrag [ 310.809679][ T7266] BTRFS info (device loop3): use lzo compression, level 1 [ 310.809701][ T7266] BTRFS info (device loop3): max_inline set to 4096 [ 310.917662][ T30] audit: type=1800 audit(1793389542.329:16): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.199" name="file1" dev="loop3" ino=260 res=0 errno=-22 [ 311.225977][ T5644] Bluetooth: hci5: command tx timeout [ 311.475205][ T7300] ALSA: mixer_oss: invalid OSS volume '' [ 311.651008][ T7300] can0: slcan on ttyS3. [ 311.821724][ T5644] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 312.197280][ T7301] can0 (unregistered): slcan off ttyS3. [ 312.416685][ T5644] Bluetooth: hci2: command tx timeout [ 312.587368][ T663] hsr_slave_0: left promiscuous mode [ 312.602491][ T663] hsr_slave_1: left promiscuous mode [ 312.611196][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.768270][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.986437][ T663] hsr_slave_0: left promiscuous mode [ 313.010799][ T663] hsr_slave_1: left promiscuous mode [ 313.011863][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.029581][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.137574][ T7314] loop1: detected capacity change from 0 to 64 [ 313.305457][ T5644] Bluetooth: hci5: command tx timeout [ 314.626030][ T5644] Bluetooth: hci2: command tx timeout [ 314.828617][ T7316] jffs2: notice: (7316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 314.870047][ T663] hsr_slave_0: left promiscuous mode [ 315.490047][ T663] hsr_slave_1: left promiscuous mode [ 315.507553][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.574247][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.330855][ T5633] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.431348][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.447259][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.456723][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.458297][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.459380][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.606166][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.606258][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.683717][ T5640] Bluetooth: hci2: command tx timeout [ 316.812297][ T5640] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 317.275329][ T7325] ALSA: mixer_oss: invalid OSS volume '' [ 317.693534][ T663] team0 (unregistering): Port device team_slave_1 removed [ 317.753691][ T663] team0 (unregistering): Port device team_slave_0 removed [ 317.785638][ T7331] slcan: can't register candev [ 317.885588][ T7337] [ 317.887947][ T7337] ====================================================== [ 317.894952][ T7337] WARNING: possible circular locking dependency detected [ 317.901958][ T7337] syzkaller #0 Not tainted [ 317.906361][ T7337] ------------------------------------------------------ [ 317.913372][ T7337] syz.3.204/7337 is trying to acquire lock: [ 317.919252][ T7337] ffff8880250bd900 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420 [ 317.930854][ T7337] [ 317.930854][ T7337] but task is already holding lock: [ 317.938306][ T7337] ffffffff91090e20 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550 [ 317.947559][ T7337] [ 317.947559][ T7337] which lock already depends on the new lock. [ 317.947559][ T7337] [ 317.957967][ T7337] [ 317.957967][ T7337] the existing dependency chain (in reverse order) is: [ 317.967065][ T7337] [ 317.967065][ T7337] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 317.974987][ T7337] __mutex_lock+0x197/0x15a0 [ 317.980121][ T7337] tcm_alloc_inst+0x65/0x1a0 [ 317.985273][ T7337] usb_get_function_instance+0xe3/0x2f0 [ 317.991344][ T7337] function_make+0x127/0x360 [ 317.996467][ T7337] configfs_mkdir+0x4f6/0x9e0 [ 318.001670][ T7337] vfs_mkdir+0x40e/0x630 [ 318.006447][ T7337] filename_mkdirat+0x285/0x510 [ 318.011852][ T7337] __se_sys_mkdirat+0x35/0x150 [ 318.017155][ T7337] do_syscall_64+0x166/0x520 [ 318.022271][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.028694][ T7337] [ 318.028694][ T7337] -> #2 (func_lock){+.+.}-{4:4}: [ 318.035925][ T7337] __mutex_lock+0x197/0x15a0 [ 318.041045][ T7337] usb_get_function_instance+0x2e/0x2f0 [ 318.047121][ T7337] function_make+0x127/0x360 [ 318.052249][ T7337] configfs_mkdir+0x4f6/0x9e0 [ 318.057464][ T7337] vfs_mkdir+0x40e/0x630 [ 318.062245][ T7337] filename_mkdirat+0x285/0x510 [ 318.067633][ T7337] __se_sys_mkdirat+0x35/0x150 [ 318.072936][ T7337] do_syscall_64+0x166/0x520 [ 318.078052][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.084469][ T7337] [ 318.084469][ T7337] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 318.092741][ T7337] __mutex_lock+0x197/0x15a0 [ 318.097858][ T7337] configfs_rmdir+0x5f0/0x950 [ 318.103070][ T7337] vfs_rmdir+0x3e6/0x6a0 [ 318.107862][ T7337] filename_rmdir+0x292/0x520 [ 318.113076][ T7337] __se_sys_rmdir+0x2e/0x140 [ 318.118205][ T7337] do_syscall_64+0x166/0x520 [ 318.123319][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.129733][ T7337] [ 318.129733][ T7337] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 318.138436][ T7337] __lock_acquire+0x164c/0x2de0 [ 318.143818][ T7337] lock_acquire+0x115/0x350 [ 318.148851][ T7337] down_write+0x91/0x200 [ 318.153620][ T7337] configfs_depend_item_unlocked+0x153/0x420 [ 318.160129][ T7337] usbg_make_tpg+0x1e0/0x550 [ 318.165242][ T7337] target_fabric_make_tpg+0xa8/0x6d0 [ 318.171065][ T7337] configfs_mkdir+0x4f6/0x9e0 [ 318.176257][ T7337] vfs_mkdir+0x40e/0x630 [ 318.181024][ T7337] filename_mkdirat+0x285/0x510 [ 318.186400][ T7337] __se_sys_mkdirat+0x35/0x150 [ 318.191718][ T7337] do_syscall_64+0x166/0x520 [ 318.196822][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.203233][ T7337] [ 318.203233][ T7337] other info that might help us debug this: [ 318.203233][ T7337] [ 318.213528][ T7337] Chain exists of: [ 318.213528][ T7337] &sb->s_type->i_mutex_key#24 --> func_lock --> tpg_instances_lock [ 318.213528][ T7337] [ 318.227382][ T7337] Possible unsafe locking scenario: [ 318.227382][ T7337] [ 318.234816][ T7337] CPU0 CPU1 [ 318.240165][ T7337] ---- ---- [ 318.245513][ T7337] lock(tpg_instances_lock); [ 318.250182][ T7337] lock(func_lock); [ 318.256584][ T7337] lock(tpg_instances_lock); [ 318.263769][ T7337] lock(&sb->s_type->i_mutex_key#24); [ 318.269313][ T7337] [ 318.269313][ T7337] *** DEADLOCK *** [ 318.269313][ T7337] [ 318.277439][ T7337] locks held by syz.3.204/7337: 4, last CPU#1: [ 318.283576][ T7337] #0: ffff88801ef1c460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 318.292830][ T7337] #1: ffff888078fbcf80 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 318.303652][ T7337] #2: ffffffff90d59268 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0 [ 318.313427][ T7337] #3: ffffffff91090e20 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550 [ 318.323092][ T7337] [ 318.323092][ T7337] stack backtrace: [ 318.328966][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.3.204 Not tainted syzkaller #0 PREEMPT(full) [ 318.338147][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 318.348278][ T7337] Call Trace: [ 318.351546][ T7337] [ 318.354487][ T7337] dump_stack_lvl+0xe8/0x150 [ 318.359086][ T7337] print_circular_bug+0x2e2/0x300 [ 318.364128][ T7337] check_noncircular+0x12f/0x150 [ 318.369072][ T7337] __lock_acquire+0x164c/0x2de0 [ 318.373924][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.379551][ T7337] ? __mutex_trylock_common+0x15f/0x270 [ 318.385098][ T7337] ? preempt_schedule_thunk+0x16/0x40 [ 318.390469][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.396095][ T7337] ? preempt_schedule_common+0x7f/0xd0 [ 318.401558][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.407183][ T7337] ? preempt_schedule_thunk+0x16/0x40 [ 318.412571][ T7337] lock_acquire+0x115/0x350 [ 318.417077][ T7337] ? configfs_depend_item_unlocked+0x153/0x420 [ 318.423226][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.428859][ T7337] down_write+0x91/0x200 [ 318.433100][ T7337] ? configfs_depend_item_unlocked+0x153/0x420 [ 318.439248][ T7337] ? __pfx_down_write+0x10/0x10 [ 318.444096][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.449723][ T7337] ? kstrtoull+0x137/0x1d0 [ 318.454159][ T7337] configfs_depend_item_unlocked+0x153/0x420 [ 318.460142][ T7337] usbg_make_tpg+0x1e0/0x550 [ 318.464730][ T7337] ? configfs_mkdir+0x4b0/0x9e0 [ 318.469574][ T7337] ? __pfx___mutex_lock+0x10/0x10 [ 318.474590][ T7337] ? __pfx_usbg_make_tpg+0x10/0x10 [ 318.479689][ T7337] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.484709][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.490342][ T7337] target_fabric_make_tpg+0xa8/0x6d0 [ 318.495636][ T7337] configfs_mkdir+0x4f6/0x9e0 [ 318.500319][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.505953][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.511585][ T7337] ? __pfx_configfs_mkdir+0x10/0x10 [ 318.516776][ T7337] ? generic_permission+0x2ba/0x660 [ 318.521979][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.527610][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.533233][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.538862][ T7337] ? security_inode_mkdir+0xc3/0x340 [ 318.544149][ T7337] vfs_mkdir+0x40e/0x630 [ 318.548561][ T7337] filename_mkdirat+0x285/0x510 [ 318.553440][ T7337] ? __might_fault+0xaf/0x130 [ 318.558116][ T7337] ? __pfx_filename_mkdirat+0x10/0x10 [ 318.563501][ T7337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.569220][ T7337] ? do_getname+0x151/0x250 [ 318.573719][ T7337] __se_sys_mkdirat+0x35/0x150 [ 318.578489][ T7337] do_syscall_64+0x166/0x520 [ 318.583074][ T7337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.589140][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.595141][ T7337] RIP: 0033:0x7f755779f559 [ 318.599570][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.619289][ T7337] RSP: 002b:00007f7558685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 318.627736][ T7337] RAX: ffffffffffffffda RBX: 00007f7557a25fa0 RCX: 00007f755779f559 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 318.635888][ T7337] RDX: 00000000000001ff RSI: 0000200000000680 RDI: ffffffffffffff9c [ 318.643881][ T7337] RBP: 00007f7557836b20 R08: 0000000000000000 R09: 0000000000000000 [ 318.651844][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.659825][ T7337] R13: 00007f7557a26038 R14: 00007f7557a25fa0 R15: 00007ffc7124c688 [ 318.667799][ T7337] [ 318.735364][ T5644] Bluetooth: hci2: command tx timeout [ 319.381223][ T5644] Bluetooth: hci6: command tx timeout [ 319.686191][ T7345] slcan: can't register candev [ 319.843712][ T663] team0 (unregistering): Port device team_slave_1 removed [ 319.875734][ T663] team0 (unregistering): Port device team_slave_0 removed [ 320.090762][ T663] team0 (unregistering): Port device team_slave_1 removed [ 320.095043][ T663] team0 (unregistering): Port device team_slave_0 removed [ 320.224842][ T7343] syz_tun (unregistering): left allmulticast mode [ 320.244304][ T7258] tipc: Resetting bearer [ 320.263997][ T7258] tipc: Disabling bearer [ 321.366700][ T663] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.415208][ T663] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.475568][ T663] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.515040][ T663] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.612759][ T663] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.666061][ T663] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.721291][ T663] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.746236][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 321.751933][ T663] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.108284][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 322.209732][ T663] bridge_slave_1: left allmulticast mode [ 322.209760][ T663] bridge_slave_1: left promiscuous mode [ 322.209927][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.213692][ T663] bridge_slave_0: left allmulticast mode [ 322.213712][ T663] bridge_slave_0: left promiscuous mode [ 322.213861][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.236299][ T663] bridge_slave_1: left allmulticast mode [ 322.236324][ T663] bridge_slave_1: left promiscuous mode [ 322.236475][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.248904][ T663] bridge_slave_0: left allmulticast mode [ 322.248927][ T663] bridge_slave_0: left promiscuous mode [ 322.249054][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.276251][ T663] bridge_slave_1: left allmulticast mode [ 322.276276][ T663] bridge_slave_1: left promiscuous mode [ 322.276426][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.293770][ T663] bridge_slave_0: left allmulticast mode [ 322.293793][ T663] bridge_slave_0: left promiscuous mode [ 322.293931][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.318823][ T663] bridge_slave_1: left allmulticast mode [ 322.318847][ T663] bridge_slave_1: left promiscuous mode [ 322.318990][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.332376][ T663] bridge_slave_0: left allmulticast mode [ 322.332400][ T663] bridge_slave_0: left promiscuous mode [ 322.332538][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.356530][ T663] bridge_slave_1: left allmulticast mode [ 322.356557][ T663] bridge_slave_1: left promiscuous mode [ 322.356708][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.369195][ T663] bridge_slave_0: left allmulticast mode [ 322.369218][ T663] bridge_slave_0: left promiscuous mode [ 322.369356][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.470800][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.472272][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.473148][ T663] bond0 (unregistering): Released all slaves [ 322.534155][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.544828][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.546893][ T663] bond0 (unregistering): Released all slaves [ 322.591194][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.593253][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.594543][ T663] bond0 (unregistering): Released all slaves [ 322.637827][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.639193][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.640036][ T663] bond0 (unregistering): Released all slaves [ 322.674480][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.684590][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.694949][ T663] bond0 (unregistering): Released all slaves [ 322.947624][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 323.462257][ T663] hsr_slave_0: left promiscuous mode [ 323.462719][ T663] hsr_slave_1: left promiscuous mode [ 323.463256][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.463683][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.485946][ T663] hsr_slave_0: left promiscuous mode [ 323.500674][ T663] hsr_slave_1: left promiscuous mode [ 323.503763][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.503782][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.506659][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.506676][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.542795][ T663] hsr_slave_0: left promiscuous mode [ 323.543195][ T663] hsr_slave_1: left promiscuous mode [ 323.543731][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.543748][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.544352][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.544368][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.555960][ T663] hsr_slave_0: left promiscuous mode [ 323.563300][ T663] hsr_slave_1: left promiscuous mode [ 323.563873][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.570999][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.603394][ T663] hsr_slave_0: left promiscuous mode [ 323.610695][ T663] hsr_slave_1: left promiscuous mode [ 323.611498][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.616641][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.636474][ T663] veth1_macvtap: left promiscuous mode [ 323.636503][ T663] veth0_macvtap: left promiscuous mode [ 323.636580][ T663] veth1_vlan: left promiscuous mode [ 323.636631][ T663] veth0_vlan: left promiscuous mode [ 323.637297][ T663] veth1_macvtap: left promiscuous mode [ 323.637318][ T663] veth0_macvtap: left promiscuous mode [ 323.637383][ T663] veth1_vlan: left promiscuous mode [ 323.637420][ T663] veth0_vlan: left promiscuous mode [ 323.809176][ T663] team0 (unregistering): Port device team_slave_1 removed [ 323.813428][ T663] team0 (unregistering): Port device team_slave_0 removed [ 323.934560][ T663] team0 (unregistering): Port device team_slave_1 removed [ 323.944269][ T663] team0 (unregistering): Port device team_slave_0 removed [ 324.071268][ T663] team0 (unregistering): Port device team_slave_1 removed [ 324.083864][ T663] team0 (unregistering): Port device team_slave_0 removed [ 324.202306][ T663] team0 (unregistering): Port device team_slave_1 removed [ 324.213091][ T663] team0 (unregistering): Port device team_slave_0 removed [ 324.329913][ T663] team0 (unregistering): Port device team_slave_1 removed [ 324.334610][ T663] team0 (unregistering): Port device team_slave_0 removed [ 325.022336][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 325.176965][ T663] IPVS: stop unused estimator thread 0... [ 325.324952][ T5292] 8021q: adding VLAN 0 to HW filter on device eth17 [ 325.612114][ T5292] 8021q: adding VLAN 0 to HW filter on device eth18 [ 325.889537][ T5292] 8021q: adding VLAN 0 to HW filter on device eth19 [ 326.176490][ T5292] 8021q: adding VLAN 0 to HW filter on device eth20 [ 326.448201][ T5292] 8021q: adding VLAN 0 to HW filter on device eth21 [ 326.729499][ T5292] 8021q: adding VLAN 0 to HW filter on device eth22 [ 327.058990][ T5292] 8021q: adding VLAN 0 to HW filter on device eth23 [ 327.348804][ T5292] 8021q: adding VLAN 0 to HW filter on device eth24 [ 327.625113][ T5292] 8021q: adding VLAN 0 to HW filter on device eth25