last executing test programs: 11m30.979454638s ago: executing program 32 (id=13): syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x1800402, &(0x7f0000000540)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6d657461646174615f636865636b73756d3d63726336342c7f6174615f636865636b73756d3d6372633332632c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656cd6ee984c5f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c7374725f686173683d736970686173682c000f456c33737c01c96a485301f57184319607791e0389515818ee65b05741a83e2d3412b274e683f19cb37b6975e95e26fbf8", @ANYRES16=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32], 0x1, 0x5962, &(0x7f0000001400)="$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") creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) unshare(0x28000600) socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 10m33.478929764s ago: executing program 0 (id=161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a32000000"], 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x8041) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x630bc1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) sendmsg$nl_route(r5, 0x0, 0x4000000) 10m31.194304461s ago: executing program 33 (id=161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a32000000"], 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x8041) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x630bc1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) sendmsg$nl_route(r5, 0x0, 0x4000000) 10m4.577790638s ago: executing program 34 (id=213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r1, 0x8, 0x1, [0x42f1]}, 0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) 9m30.144867161s ago: executing program 35 (id=275): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r8, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) sendmsg$nl_generic(r8, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x284, 0x24, 0x100, 0x70bd2c, 0x25dfdbff, {0x1a}, [@typed={0x75, 0xe3, 0x0, 0x0, @binary="551a3e6ae55e7a8b4bfc3cbc2c42dace3d348c5095e878282f49f269a5d23d4870c7a82751fe60a562baa6cc67a9a845f6ed285ac3f8abeed17b28de66b1f71173c526d863fc30ee62e3671805fb93179f3e28c2cb1cbffb7242781cdbe8d3b17ed2c28129a182bab1fe1adba90e7f8a9a"}, @nested={0xbf, 0xa5, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="478fea7db489ddc4bdf42fb56bf057af3152cc48640a196d4f328d603f1551f51d6930e6c3d69b3a96be434428edff8d6d4b46a07516a86059a94bb6c8612fd66900ac48521aa60350e494fa876362fb09cd379f64fd26b2f73a24bb293b6ed774d3222f0b5a4cbca60d71bb004d3ed5b3282079a6892bf63a324ffbbb38fc005d97d14198339a691d82f3791e45bcec012bfef545ac97b211512c0e642b38ec8a0196501c66979ec0a2dde8663bc8a2874c5c0a21bb6e"]}, @generic="1022d7259e81ff759e1b0cbe8038b6a823f70bcb558e363f57a6cc46286290acffc025cca5c6d975b5fa252e8a0bf89924d7a03a5124edabf25460eb32e67e6bfb5336ee1547a8394e6425db29db11ba00e62d22900e3ce13f66110d280fe7ab73f2b44cba7b8a7d5df9f9b9016bf16d9f5a3102a1be0e44d333122444a7879ff2a8e41a96284b8853857350ffffd3c75ae00d5e1200e18883a505b611610990cdec7371a7a450f534cf7256bc338d5b5a4ee58ba29feb103eef7298705c07e37a69b0efd2f3d5e7778ac1f19bc2677fd4ab90a7e9bb77c0a6ea5fc50b0a1503f7e3b5a28e8691874a45371abe16d8", @nested={0x47, 0x1e, 0x0, 0x1, [@generic="0e5f4dca4370a5f626ede2d2547d8257cfc8da053127fdabd9dd5abba50de7f4354a28659730346ff3478782d1110d95db5996be4b08d42f0a18364b9917be26c1cd55"]}]}, 0x284}}, 0x4800) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) 8m47.388536638s ago: executing program 36 (id=327): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 7m41.081860901s ago: executing program 37 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffff9, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x9, 0x6}}}}]}, 0x48}}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m25.706961427s ago: executing program 38 (id=476): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) close(0x3) 7m22.707589955s ago: executing program 39 (id=482): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) shutdown(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000001140), 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0xfffffffd, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x5e22, [0x0, 0xffffffff, 0xfffffffe], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 7m18.358301451s ago: executing program 40 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x4a8, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x478, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff3}}, @TCA_BASIC_EMATCHES={0xec, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x3, 0x0, 0x0, {{0xe1, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x401}, {0x60000, 0x8, 0x7, 0x101}}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x10, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="37463edca04e76d0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1}, {0x5, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_VAR="ff9ad3c59eff3e5faf", @TCF_META_TYPE_VAR="1a2bc93cf2b3", @TCF_META_TYPE_VAR="8f2113", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xe679, 0x7, 0x3}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}]}, @TCA_BASIC_ACT={0x190, 0x3, [@m_vlan={0x12c, 0x13, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xd801, 0xf3, 0x5, 0x935c, 0xffff}, 0x1}}]}, {0xe1, 0x6, "ca395004760f4c73519089f1125489fe5caf47e8c59f15cbd8ffc9691bdbf4e32bf21fe9afc97dcd3010e466b79347c266ec95e219ecfe1df384474bffc8ee4205ca6ef221665af9f9261c12313a84cb46b0db62f03acbe3d9993e3b07e020c4626e1d77df5650c30762d843ff7003ef065bc0e79ff7f3b1006966691b3279703ba1f50a3c91fc45f4cd61db5b0ba6053f6a210799a9175ffd48e6ffabed7e3da1dc406bcd6e1b8c5bdc6b3e1d6ab8e2086a6b3e34f10267528804cc1ed069ece84fa9d1af9c7d5c08bbd9a3d94ca97516047902934125a96391d15abd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x60, 0x19, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_ACT={0x1f0, 0x3, [@m_skbmod={0xac, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xcf57}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="bdc3c0250da5"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x5e, 0x6, "cd7395ed1613c98b37c9e4510bfb175a01ea40c6b0294905e697e7c75527a021d698dcace88920cefacdf835d6a937ceff4fe425f0bfb375bce39d475beb26be32ea63287c01826e8757e3d97a2b246f417d4087ea2d020b4130"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x140, 0x18, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x86e, 0x6, 0x10001}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5e11, 0xffffffffffffffff, 0x9, 0xb}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x8, 0xff, 0x7}, 0x66}}]}, {0xbd, 0x6, "1f1cefd5b0993df221e6758cb7235e763e17192e03f919974db0d8907c8fe16cf02888aaa135696a179f60fa546bc71f2f44a0e0f4200e466fce8140ed908ef08cf1d9296d5640282e0628cfde4cadfdae8dc0d49c7c4a2d2adc78f946b5422a90711945f05c15632a32add64d33b5101644e50af310a2a5c204b378a0a06fedc8e5be6b3f4dc6766f0ea6a8f61b5b7b0ce03ce2862cea288e9e6ed8754ff5a0123dfe5415e7e2635547c3f0b66158b364c6e73336c1eb007a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 7m15.25690722s ago: executing program 4 (id=496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r2) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r1, 0x8, 0x1, [0x42f1]}, 0xa) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000980)={[{@grpid}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9c03}}, {@block_validity}, {@mb_optimize_scan}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@nouid32}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xfffffffffffffffe}}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") 7m14.032762176s ago: executing program 4 (id=497): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) r1 = io_uring_setup(0x152e, &(0x7f0000000480)={0x0, 0x7c5b, 0x800, 0x8000002, 0x1d4}) close_range(r1, 0xffffffffffffffff, 0x0) 7m13.84390742s ago: executing program 4 (id=498): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x29) 7m13.752245771s ago: executing program 4 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 7m13.39545389s ago: executing program 4 (id=500): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 7m12.619848244s ago: executing program 4 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f510100a151010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7m12.242391101s ago: executing program 41 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f510100a151010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6m58.650191729s ago: executing program 1 (id=505): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) r1 = io_uring_setup(0x152e, &(0x7f0000000480)={0x0, 0x7c5b, 0x800, 0x8000002, 0x1d4}) close_range(r1, 0xffffffffffffffff, 0x0) 6m58.46411211s ago: executing program 1 (id=506): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x29) 6m58.400132259s ago: executing program 1 (id=507): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m57.026286189s ago: executing program 1 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 6m56.568212765s ago: executing program 1 (id=509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0xf}}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e00", 0x22}], 0x1}, 0x0) 6m55.769438471s ago: executing program 1 (id=510): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0) 6m55.015313835s ago: executing program 42 (id=510): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0) 6m55.000273603s ago: executing program 0 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xfffffffffffffedb, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x598e}]}, &(0x7f0000000180)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) close(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYBLOB="f2ff0000001714815aa5fe6f00000000005a6366d400"/35], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r10}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r11 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r12 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r12, &(0x7f0000000000)=""/43, 0x2b) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) sendmsg$nl_route(r0, 0x0, 0x0) 6m52.690163038s ago: executing program 0 (id=515): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, 0x0, 0x0, 0x0) 6m52.223904616s ago: executing program 0 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 6m51.22787227s ago: executing program 0 (id=518): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m49.776125207s ago: executing program 0 (id=522): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000002000a0002000180c2003588e4fd"], 0x28}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000380)=""/18, 0x12, 0x0, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x0, "3258c5c00e7f94ae1e008fba001a0000f4ff40000000000f2300e91aba2800", 0x34343459}) 6m49.215443942s ago: executing program 43 (id=522): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000002000a0002000180c2003588e4fd"], 0x28}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000380)=""/18, 0x12, 0x0, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x0, "3258c5c00e7f94ae1e008fba001a0000f4ff40000000000f2300e91aba2800", 0x34343459}) 6m39.059847819s ago: executing program 6 (id=538): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x6c82, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x66, 0x0, 0x63, 0x0, 0x0, @empty, @empty}}}}) 6m35.258512982s ago: executing program 6 (id=545): writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x6, 0xc, 0x3, 0x4, 0x3, "4c6fd700ea0e8d28c8386e94c27d67e7616aca", 0xfffff52a, 0x9}) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 6m33.286755797s ago: executing program 6 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001900), 0xa0041, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 6m32.072191651s ago: executing program 6 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(0x0, 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 6m30.762676545s ago: executing program 6 (id=555): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40014) 6m27.692082162s ago: executing program 6 (id=561): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 6m26.852016269s ago: executing program 44 (id=561): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 26.379891902s ago: executing program 3 (id=1160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) r1 = socket(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r2, 0x402, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 22.772060292s ago: executing program 3 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xfffffffffffffedb, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x598e}]}, &(0x7f0000000180)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) close(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYBLOB="f2ff0000001714815aa5fe6f00000000005a6366d400"/35], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 22.231635945s ago: executing program 3 (id=1169): socket$alg(0x26, 0x5, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x240000c4) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 19.61111107s ago: executing program 5 (id=1178): read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, 0x0}, 0x4800) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 18.915589406s ago: executing program 5 (id=1181): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0xfe5f) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 17.588062349s ago: executing program 8 (id=1182): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$null(0xffffffffffffff9c, 0x0, 0xa0041, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 16.336680504s ago: executing program 2 (id=1184): ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) io_uring_setup(0x15fb, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}}}, 0xe) set_mempolicy(0x2, &(0x7f0000000000)=0xf, 0x7) 16.277403176s ago: executing program 5 (id=1185): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$eJzs3U1rE0Ecx/HfbJImtqVuH0QQT9WCJ+nDRbwUJO/AiydRmwjFUEErqCf1LL4A730LvgCPnsSz4K0nX0BukZmdNZtkN5uGppuk3w8kbLrzn4fsbGf+KSUCcGk9qP852Tu1DyOVVJJ0Xwok1aSypGu6XntzdHx43Go2hlVUchH2YRRFmoEyB0fNtFAb5yK80L4qazn5M0xG7bc+FN0HFM/d/SkCqervTne+duE9m4zLPulNW2291UrR/QAAFMuv/4Ff55f9/j0IpC2/7Peu/zO+gLaL7sCEfc85n1j/XZbVMfb6XnWnuvmeS+HKqvigk73TtLoWc9paUDSzejaYJi+rdH0Jrjw/bDXvHrxsNQJ90r5X6RbbcM+NaOrG4pzWHn8crHrT56Yj5pfJ2s5myY2hYsewm+x/osj6ObboM+7ht6b5YX6axybUVzX+7//KHWMvk7tSYd+Vivq/nV2jG+WCXKmMUa66Rm74FkYZZUkZGYniGbXadwHDvH66qLW+qGh0OzlR66lRuzlRG/1R3dmcHTlp5ot5ZDb1V99UT+z/A/tub2mUO9OWcSX9zBg6nrIrGbrZGc/Pm6klg3FHhDF81jPd08rrd+9fPG21mq/m9sDeiYOn7AoyLT28+IN4EkxLf+b2wL7JhbQerzvj15P9q4OP5edH96KfMZBJMC/svstE+V8iX9l2mzX7FPbu06vJ2E5e5YkadzJygzX3vJidwfUwLr9ZSvnr4mCLQ3OuW3ek26O0GAl9P6fP/jhBpq5fesLn/wAAAAAAAAAAAAAAAAAAALPm/P7loKasU0WPEQAAAAAAAAAAAAAAAAAAAACAWZfy/b/VQr//96GiV3z/LzBx/wIAAP//nY5x9w==") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) close(0xffffffffffffffff) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0xfffffffffffffff5, 0x0, {{0x4, 0x7, 0x2, 0xfff, 0x3, 0x1ff, 0x1, 0x80000000}}}, 0x60) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000980)={[{@grpid}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9c03}}, {@block_validity}, {@mb_optimize_scan}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@nouid32}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xfffffffffffffffe}}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") 15.972107018s ago: executing program 2 (id=1187): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f00000024c0)=""/4092, 0xffc}], 0x1, 0xffffffff, 0x2) 15.971659317s ago: executing program 8 (id=1188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x300fff2) 13.979449346s ago: executing program 9 (id=1189): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}, 0x66}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000840)=""/110, 0x6e}, {0x0}], 0x2}, 0x2}], 0x2, 0x2003, 0x0) 12.013053739s ago: executing program 9 (id=1191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 11.705710778s ago: executing program 8 (id=1193): openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, 0x0) 11.440429294s ago: executing program 9 (id=1194): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x47, 0xc1b, &(0x7f0000001940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0xfffffde2, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) 11.390607899s ago: executing program 3 (id=1195): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900a70b5c93f589000009000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="729ab1077000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000048000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r10, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x2) 11.282485634s ago: executing program 5 (id=1196): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x0, 0x10, r0, 0x8881d000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, 0x0, 0x4048081) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) setsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, 0x0) 11.123194634s ago: executing program 8 (id=1197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0xfe5f) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 10.762842324s ago: executing program 7 (id=1198): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 9.857063367s ago: executing program 3 (id=1199): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x458f6f713530fcaf, &(0x7f0000000400), 0x84, 0x46e, &(0x7f0000000900)="$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") r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r1, 0x0, 0x0, 0x31737cf9e52cfcff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f0000001500)=[{0x0}, {0x0}, {&(0x7f00000012c0)}, {&(0x7f0000000480)="cc081fd0ca0b836bc65a4db931e08306609b6c76a5abd1ede211b9a8d81e4b485d3d2f0ef41e1451", 0x28}, {&(0x7f0000001340)="f5841c7145d339cc06937992dbddf407e5d28059a286d5af665d7dea89b51ef87c22dbb6e4df5f5c1d057dda8b4ba78c178fb0feec7d3301b8cc2df94ed9b63dba0c347f44f5829de3af80dd3d5c2c0c826791f189224230cbff36931b8fa58520288dd9faf2cb4cb01fd6d562fddb0f44603288f54827cb61103be950ca0f544be7fdc9b00f47c876fb245ae86f3108d98daf08839600cf406740", 0x9b}], 0x5, &(0x7f0000001580)}}], 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x20004) 9.519891168s ago: executing program 5 (id=1200): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x10000000}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x41, 0x2}, 0x1}}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5f, 0x7ffc0002}]}) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) 9.337248138s ago: executing program 8 (id=1201): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240)={0x7, 0x10, 0x9, 0x7, 0x80, 0x7, 0x0, 0x3, 0x2, 0x80, 0xd, 0x10, 0x42, 0xdc}, 0xe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2082c0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xf44, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 7.468207511s ago: executing program 3 (id=1202): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000200)=0x1) 7.362199614s ago: executing program 2 (id=1203): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28180ff, 0x0, 0x0, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x10800) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc0000}], 0x1c, 0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f00000000c0), 0x0}, 0x20) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) 6.941675839s ago: executing program 9 (id=1205): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f00000000c0), 0x0}, 0x20) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) 5.608743157s ago: executing program 7 (id=1206): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4.44863707s ago: executing program 5 (id=1207): socket$alg(0x26, 0x5, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x240000c4) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 4.168246724s ago: executing program 9 (id=1208): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300fff2) 3.906212772s ago: executing program 7 (id=1209): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) close(0xffffffffffffffff) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0xfffffffffffffff5, 0x0, {{0x4, 0x7, 0x2, 0xfff, 0x3, 0x1ff, 0x1, 0x80000000}}}, 0x60) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000980)={[{@grpid}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9c03}}, {@block_validity}, {@mb_optimize_scan}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@nouid32}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xfffffffffffffffe}}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") 3.576585627s ago: executing program 2 (id=1210): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x110) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) stat(0x0, &(0x7f0000000180)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [{0x8, 0x7}, {}], {0x10, 0x4}, {0x20, 0x4}}, 0x34, 0x2) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.364008193s ago: executing program 2 (id=1211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) 2.338584881s ago: executing program 9 (id=1212): sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$usbmon(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 2.209643689s ago: executing program 2 (id=1213): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w82+74z7+48T+br3ffdDaBrDWV/kogdEfFbRAw0qksbDDWerl05N3n9yrnJJBYWXv8zydtdvXJusmxavm57URlOI9KPkmIjS82eOXtiol6vnS7qo3Mn3x6dPXP2iXdPThyvHa+dGj9y5PChsaefGn+yI3lmeV3d98HM/r0vvnnxlcmjF9/66Zss3h3F+uY8OmUoS/yvhVzrukc7vbGK7WwqJ70VBsIt6YmIbHf15ef/QPTEjZ03EC98WGlwwLrK7k1b2q+eXwBuY0lUHQFQjfJGn33+LR8b1PXYFC4/2/gAlOV9rXg01vRGWrTpa/l820lDEXF0/u8vskes0zgEAECzTyY/fzl7fv/61y9lfY+BxTVp3JM//57/3VXMoQxGxJ0RsTsi7oqIPRFxd0Te9t6IuG+N8dzc/0kvrfEtV5T1/54p5raW9v/K3l8M9hS1nXn+fcmx6XrtYPE/GY6+LVl9bIVtfPf8r5+2W9fc/8se2fbLvmARx6XelgG6qYm5ibxT2gGXL0Ts610u/2RxJiCJiL0Rse/W3npXWZh+7Kv97Rqtnv8KOjDPtPBllt58lv98tORfSprnJ6dvmp8c3Rr12sHR8qi42c+/fPxau+2vKf8OuFxrPDft/9Ymg0nzfO1sZ7f/H4//tD95I59n7i+WvTcxN3d6LKI/yS9nS5eP33htWS/bZ8f/8IHlz//dxWuy/O+PiOwgfiAiHoyIh4rYH46IRyLiwAo5/vjc6vlHWtH+vxAxtez1b/H4b9n/t17oOfHDt+22/+/2/+G8NFwsya9/q1gunOxy0RrgWv53AAAA8H+R5t+BT9KRxXKajow0vsO/J+5I6zOzc48fm3nn1FTju/KD0ZeWI10DxXhofbpeG0vmi3dsjI+OF2PF5XjpoWLc+LOebXl9ZHKmPlVx7tDttrc5/zN/9FQdHbDOti27dLx/wwMBKtA6j54urZ5/NVwM4Hbl99rQvVY5/9ONigPYeO7/0L2WO//Pt9TNBcDtyf0fupfzH7pU+n3VEQAVcv+HrrSW3/WvY2Hr5gijmsJm3Sl5IaIspJsiHoV1KlR9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwIAAP//2wzmew==") 1.689288077s ago: executing program 7 (id=1214): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 1.124761648s ago: executing program 8 (id=1215): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f00000024c0)=""/4092, 0xffc}], 0x1, 0xffffffff, 0x2) 0s ago: executing program 7 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f0ffffff00000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001"], 0x48) kernel console output (not intermixed with test programs): adv_slave_1 [ 456.398681][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.527660][ T6242] veth1_macvtap: left promiscuous mode [ 456.533567][ T6242] veth0_macvtap: left promiscuous mode [ 456.539245][ T6242] veth1_vlan: left promiscuous mode [ 456.548182][ T6242] veth0_vlan: left promiscuous mode [ 456.577539][ T8649] loop5: detected capacity change from 0 to 256 [ 456.648905][ T8649] FAT-fs (loop5): Directory bread(block 64) failed [ 456.655532][ T8649] FAT-fs (loop5): Directory bread(block 65) failed [ 456.662242][ T8649] FAT-fs (loop5): Directory bread(block 66) failed [ 456.668773][ T8649] FAT-fs (loop5): Directory bread(block 67) failed [ 456.675421][ T8649] FAT-fs (loop5): Directory bread(block 68) failed [ 456.681999][ T8649] FAT-fs (loop5): Directory bread(block 69) failed [ 456.688594][ T8649] FAT-fs (loop5): Directory bread(block 70) failed [ 456.695150][ T8649] FAT-fs (loop5): Directory bread(block 71) failed [ 456.701807][ T8649] FAT-fs (loop5): Directory bread(block 72) failed [ 456.708335][ T8649] FAT-fs (loop5): Directory bread(block 73) failed [ 456.995917][ T8654] loop8: detected capacity change from 0 to 64 [ 457.396083][ T30] audit: type=1326 audit(1757965727.793:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 457.490889][ T30] audit: type=1326 audit(1757965727.793:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 457.553992][ T30] audit: type=1326 audit(1757965727.793:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 457.585767][ T8662] loop5: detected capacity change from 0 to 1024 [ 457.604084][ T30] audit: type=1326 audit(1757965727.813:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 457.692879][ T30] audit: type=1326 audit(1757965727.813:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 457.790765][ T30] audit: type=1326 audit(1757965727.843:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb2c57c1465 code=0x7ffc0000 [ 457.803401][ T8665] hub 9-0:1.0: USB hub found [ 457.860953][ T30] audit: type=1326 audit(1757965727.993:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 457.902730][ T8665] hub 9-0:1.0: 1 port detected [ 458.378198][ T5882] Bluetooth: hci2: command tx timeout [ 459.549300][ T8676] loop8: detected capacity change from 0 to 64 [ 459.572321][ T6242] team0 (unregistering): Port device team_slave_1 removed [ 459.637484][ T6242] team0 (unregistering): Port device team_slave_0 removed [ 459.971323][ T44] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 460.491288][ T5882] Bluetooth: hci2: command tx timeout [ 460.873425][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 460.905444][ T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.935347][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.980063][ T44] usb 6-1: config 0 descriptor?? [ 461.000834][ T44] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 462.797592][ T8391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 463.097196][ T8391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.169990][ T8434] hsr_slave_0: entered promiscuous mode [ 463.186325][ T8434] hsr_slave_1: entered promiscuous mode [ 463.200711][ T8434] debugfs: 'hsr0' already exists in 'hsr' [ 463.206997][ T8434] Cannot create hsr debugfs directory [ 463.220552][ T8391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.243716][ T8391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.779234][ T8715] loop8: detected capacity change from 0 to 40427 [ 463.832640][ T8725] loop2: detected capacity change from 0 to 512 [ 463.927244][ T8725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.948682][ T8725] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.046849][ T6242] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.121334][ T6069] usb 6-1: USB disconnect, device number 6 [ 464.256083][ T8196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.259809][ T8715] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 464.335008][ T8715] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 464.368197][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 464.551651][ T6069] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 464.644961][ T6242] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.739145][ T8269] syz-executor: attempt to access beyond end of device [ 464.739145][ T8269] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 464.772113][ T6069] usb 6-1: Using ep0 maxpacket: 16 [ 464.789242][ T6069] usb 6-1: config 0 has an invalid interface number: 47 but max is 0 [ 464.819849][ T6069] usb 6-1: config 0 has no interface number 0 [ 464.823251][ T8269] CPU: 0 UID: 0 PID: 8269 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 464.823295][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.823316][ T8269] Call Trace: [ 464.823328][ T8269] [ 464.823341][ T8269] dump_stack_lvl+0x16c/0x1f0 [ 464.823403][ T8269] f2fs_handle_critical_error+0x624/0x9f0 [ 464.823452][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.823494][ T8269] ? f2fs_build_fault_attr+0x53/0x1f0 [ 464.823544][ T8269] f2fs_write_end_io+0x958/0xcf0 [ 464.823597][ T8269] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 464.823653][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.823706][ T8269] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 464.823753][ T8269] bio_endio+0x713/0x860 [ 464.823815][ T8269] submit_bio_noacct+0x306/0x1ed0 [ 464.823873][ T8269] __submit_merged_bio+0x33c/0x770 [ 464.823928][ T8269] __submit_merged_write_cond+0x319/0x3f0 [ 464.823990][ T8269] f2fs_write_cache_pages+0x2067/0x2570 [ 464.824081][ T8269] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 464.824145][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824186][ T8269] ? __kasan_check_byte+0x13/0x50 [ 464.824220][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824264][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824305][ T8269] ? rcu_is_watching+0x12/0xc0 [ 464.824350][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824394][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824435][ T8269] ? __kasan_check_byte+0x13/0x50 [ 464.824483][ T8269] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 464.824535][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824638][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824680][ T8269] ? add_lock_to_list+0x9d/0x130 [ 464.824736][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824786][ T8269] f2fs_write_data_pages+0x4ad/0xd90 [ 464.824851][ T8269] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 464.824904][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.824958][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.825005][ T8269] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 464.825070][ T8269] do_writepages+0x27a/0x600 [ 464.825123][ T8269] ? __pfx_do_writepages+0x10/0x10 [ 464.825167][ T8269] ? do_raw_spin_unlock+0x172/0x230 [ 464.825206][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.825248][ T8269] ? _raw_spin_unlock+0x28/0x50 [ 464.825302][ T8269] filemap_fdatawrite_wbc+0x104/0x160 [ 464.825348][ T8269] ? stack_trace_save+0x8e/0xc0 [ 464.825396][ T8269] __filemap_fdatawrite_range+0xb9/0x100 [ 464.825456][ T8269] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 464.825513][ T8269] ? check_path.constprop.0+0x24/0x50 [ 464.825617][ T8269] ? find_held_lock+0x2b/0x80 [ 464.825663][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.825706][ T8269] ? do_raw_spin_unlock+0x172/0x230 [ 464.825746][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.825794][ T8269] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 464.825873][ T8269] block_operations+0x2b0/0xfe0 [ 464.825919][ T8269] ? __pfx_block_operations+0x10/0x10 [ 464.825975][ T8269] ? add_lock_to_list+0x9d/0x130 [ 464.826087][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.826131][ T8269] ? down_write+0x14d/0x200 [ 464.826166][ T8269] ? __pfx_down_write+0x10/0x10 [ 464.826205][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.826249][ T8269] ? rcu_is_watching+0x12/0xc0 [ 464.826301][ T8269] f2fs_write_checkpoint+0x2b8/0x4c60 [ 464.826345][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.826388][ T8269] ? kfree+0x2b4/0x4d0 [ 464.826430][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.826476][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.826517][ T8269] ? rcu_is_watching+0x12/0xc0 [ 464.826560][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.826602][ T8269] ? kthread_stop+0x273/0x630 [ 464.826641][ T8269] kill_f2fs_super+0x3c2/0x470 [ 464.826677][ T8269] ? __pfx_kill_f2fs_super+0x10/0x10 [ 464.826710][ T8269] ? lockdep_hardirqs_on+0x7c/0x110 [ 464.826784][ T8269] deactivate_locked_super+0xc1/0x1a0 [ 464.826838][ T8269] deactivate_super+0xde/0x100 [ 464.826893][ T8269] cleanup_mnt+0x225/0x450 [ 464.826951][ T8269] task_work_run+0x150/0x240 [ 464.826992][ T8269] ? __pfx_task_work_run+0x10/0x10 [ 464.827028][ T8269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.827078][ T8269] ? __pfx___x64_sys_umount+0x10/0x10 [ 464.827123][ T8269] exit_to_user_mode_loop+0xeb/0x110 [ 464.827163][ T8269] do_syscall_64+0x41c/0x4e0 [ 464.827199][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.827234][ T8269] RIP: 0033:0x7fa99b38fed7 [ 464.827262][ T8269] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 464.827296][ T8269] RSP: 002b:00007ffc1f6d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 464.827329][ T8269] RAX: 0000000000000000 RBX: 00007fa99b411c05 RCX: 00007fa99b38fed7 [ 464.827352][ T8269] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1f6d00f0 [ 464.827374][ T8269] RBP: 00007ffc1f6d00f0 R08: 0000000000000000 R09: 0000000000000000 [ 464.827396][ T8269] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1f6d1180 [ 464.827419][ T8269] R13: 00007fa99b411c05 R14: 00000000000716b8 R15: 00007ffc1f6d11c0 [ 464.827468][ T8269] [ 464.827481][ T8269] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 464.886916][ T6069] usb 6-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=86.58 [ 465.352911][ T6069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.403484][ T6242] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.509802][ T6069] usb 6-1: Product: syz [ 465.514270][ T6069] usb 6-1: Manufacturer: syz [ 465.518886][ T6069] usb 6-1: SerialNumber: syz [ 465.528168][ T6069] usb 6-1: config 0 descriptor?? [ 465.550500][ T6069] gspca_main: spca500-2.14.0 probing 084d:0003 [ 465.784070][ T5943] usb 6-1: USB disconnect, device number 7 [ 465.968533][ T8743] loop2: detected capacity change from 0 to 4096 [ 466.015786][ T6242] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.106428][ T8743] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 466.228824][ T8745] netlink: 'syz.2.596': attribute type 4 has an invalid length. [ 466.236767][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'. [ 466.763320][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.785943][ T8391] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.819888][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.827057][ T6238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.923693][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.930893][ T6238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.286879][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.299281][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.317387][ T8618] bridge_slave_0: entered allmulticast mode [ 467.339859][ T8618] bridge_slave_0: entered promiscuous mode [ 467.624076][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.686793][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.695721][ T8618] bridge_slave_1: entered allmulticast mode [ 467.708995][ T8618] bridge_slave_1: entered promiscuous mode [ 467.961755][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.000474][ T8434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.033679][ T8434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.134508][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.162116][ T8434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.206278][ T8434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 468.692193][ T6242] bridge_slave_1: left allmulticast mode [ 468.697904][ T6242] bridge_slave_1: left promiscuous mode [ 468.729414][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.769833][ T6242] bridge_slave_0: left allmulticast mode [ 468.785838][ T6242] bridge_slave_0: left promiscuous mode [ 468.811529][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.261952][ T8762] loop2: detected capacity change from 0 to 32768 [ 469.295142][ T8762] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 469.322626][ T8762] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 470.075302][ T8196] ocfs2: Unmounting device (7,2) on (node local) [ 470.274801][ T8784] netlink: 76 bytes leftover after parsing attributes in process `syz.2.603'. [ 470.972188][ T6242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.039885][ T6242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.073194][ T6242] bond0 (unregistering): Released all slaves [ 471.126106][ T8618] team0: Port device team_slave_0 added [ 471.205287][ T8618] team0: Port device team_slave_1 added [ 471.438472][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.499613][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.597762][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.893484][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.957604][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.048647][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.613225][ T8618] hsr_slave_0: entered promiscuous mode [ 472.662459][ T8618] hsr_slave_1: entered promiscuous mode [ 472.668812][ T8618] debugfs: 'hsr0' already exists in 'hsr' [ 472.691733][ T8618] Cannot create hsr debugfs directory [ 472.821601][ T6242] hsr_slave_0: left promiscuous mode [ 472.902094][ T6242] hsr_slave_1: left promiscuous mode [ 472.944729][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.971299][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.993603][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.001029][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.081896][ T8797] comedi comedi0: Minor 3 could not be opened [ 473.082884][ T6242] veth1_macvtap: left promiscuous mode [ 473.163180][ T6242] veth0_macvtap: left promiscuous mode [ 473.212458][ T6242] veth1_vlan: left promiscuous mode [ 473.230288][ T6242] veth0_vlan: left promiscuous mode [ 473.461725][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 473.651498][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 473.664981][ T44] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 473.678581][ T44] usb 3-1: config 0 has no interface number 0 [ 473.714518][ T44] usb 3-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=86.58 [ 473.732611][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.755074][ T44] usb 3-1: Product: syz [ 473.775765][ T44] usb 3-1: Manufacturer: syz [ 473.780503][ T44] usb 3-1: SerialNumber: syz [ 473.814754][ T44] usb 3-1: config 0 descriptor?? [ 473.906400][ T44] gspca_main: spca500-2.14.0 probing 084d:0003 [ 474.072870][ T8804] netlink: 'syz.8.609': attribute type 2 has an invalid length. [ 474.080862][ T8804] netlink: 'syz.8.609': attribute type 4 has an invalid length. [ 474.385667][ T44] usb 3-1: USB disconnect, device number 6 [ 475.724048][ T6242] team0 (unregistering): Port device team_slave_1 removed [ 475.754290][ T6242] team0 (unregistering): Port device team_slave_0 removed [ 476.371515][ T5868] Bluetooth: hci2: command 0x0405 tx timeout [ 477.174025][ T8820] loop2: detected capacity change from 0 to 32768 [ 477.253659][ T8820] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 477.355728][ T30] audit: type=1800 audit(1757965747.683:19): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.613" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 477.720339][ T8824] loop5: detected capacity change from 0 to 1024 [ 477.754524][ T8819] block nbd0: shutting down sockets [ 477.788224][ T8824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.097000][ T8829] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4182: comm syz.5.614: Allocating blocks 497-513 which overlap fs metadata [ 478.145113][ T8829] EXT4-fs (loop5): pa ffff88804e3d5740: logic 256, phys. 385, len 8 [ 478.153750][ T8829] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5433: group 0, free 0, pa_free 1 [ 478.413359][ T8196] ocfs2: Unmounting device (7,2) on (node local) [ 478.858025][ T8231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.836442][ T8838] loop2: detected capacity change from 0 to 128 [ 479.922829][ T8840] nbd_handle_cmd: 2 callbacks suppressed [ 479.922862][ T8840] block nbd5: Attempted send on invalid socket [ 479.935603][ T8840] blk_print_req_error: 5 callbacks suppressed [ 479.935659][ T8840] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 479.953880][ T8840] block nbd5: Attempted send on invalid socket [ 479.960139][ T8840] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.011783][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.011783][ T6247] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 483.046812][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.046812][ T6247] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 483.070847][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.070847][ T6247] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 483.122955][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.122955][ T6247] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 483.329230][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.329230][ T6247] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 483.351640][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.351640][ T6247] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 483.383657][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.383657][ T6247] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 483.399960][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.399960][ T6247] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 483.420525][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.420525][ T6247] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 483.446410][ T6247] kworker/u8:24: attempt to access beyond end of device [ 483.446410][ T6247] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 483.981283][ T8854] loop2: detected capacity change from 0 to 256 [ 485.393124][ T8852] comedi comedi0: Minor 3 could not be opened [ 485.454785][ T8854] FAT-fs (loop2): Directory bread(block 64) failed [ 485.461454][ T8854] FAT-fs (loop2): Directory bread(block 65) failed [ 485.468023][ T8854] FAT-fs (loop2): Directory bread(block 66) failed [ 485.474585][ T8854] FAT-fs (loop2): Directory bread(block 67) failed [ 485.481151][ T8854] FAT-fs (loop2): Directory bread(block 68) failed [ 485.487713][ T8854] FAT-fs (loop2): Directory bread(block 69) failed [ 485.494425][ T8854] FAT-fs (loop2): Directory bread(block 70) failed [ 485.501578][ T8854] FAT-fs (loop2): Directory bread(block 71) failed [ 485.508157][ T8854] FAT-fs (loop2): Directory bread(block 72) failed [ 485.515168][ T8854] FAT-fs (loop2): Directory bread(block 73) failed [ 485.992592][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 486.005593][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 486.015206][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 486.025340][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 486.033432][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 486.499188][ T30] audit: type=1800 audit(1757965756.883:20): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.621" name="/" dev="9p" ino=2 res=0 errno=0 [ 488.131421][ T5882] Bluetooth: hci6: command tx timeout [ 490.010774][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.022059][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.041362][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.126037][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.171005][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.212414][ T5882] Bluetooth: hci6: command tx timeout [ 491.360176][ T8886] loop5: detected capacity change from 0 to 32768 [ 491.449805][ T8886] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.627 (8886) [ 491.840174][ T8886] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 491.843160][ T8891] netlink: 'syz.8.628': attribute type 2 has an invalid length. [ 491.860664][ T8891] netlink: 'syz.8.628': attribute type 4 has an invalid length. [ 491.872291][ T8886] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 492.213273][ T5882] Bluetooth: hci3: command tx timeout [ 492.296737][ T5882] Bluetooth: hci6: command tx timeout [ 493.639117][ T8886] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 493.641107][ T8886] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 493.807855][ T8886] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 493.844810][ T8886] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 494.105665][ T8886] BTRFS error (device loop5): open_ctree failed: -12 [ 494.291380][ T5882] Bluetooth: hci3: command tx timeout [ 494.304056][ T8916] loop2: detected capacity change from 0 to 64 [ 494.381689][ T5882] Bluetooth: hci6: command tx timeout [ 494.790243][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 495.001299][ T8920] can0: slcan on ptm0. [ 495.142994][ T8618] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 495.291063][ T8618] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 495.453054][ T8618] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 495.501641][ T8917] can0 (unregistered): slcan off ptm0. [ 495.532997][ T8618] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 495.590393][ T6242] bridge_slave_1: left allmulticast mode [ 495.651932][ T6242] bridge_slave_1: left promiscuous mode [ 495.657758][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.943627][ T6242] bridge_slave_0: left allmulticast mode [ 495.949323][ T6242] bridge_slave_0: left promiscuous mode [ 495.977961][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.401350][ T5882] Bluetooth: hci3: command tx timeout [ 497.809853][ T8943] comedi comedi0: Minor 3 could not be opened [ 497.904344][ T6242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.925071][ T6242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.059133][ T6242] bond0 (unregistering): Released all slaves [ 498.446271][ T6242] hsr_slave_0: left promiscuous mode [ 498.455065][ T5882] Bluetooth: hci3: command tx timeout [ 498.481354][ T6242] hsr_slave_1: left promiscuous mode [ 498.492912][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.505244][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.169754][ T6242] team0 (unregistering): Port device team_slave_1 removed [ 500.216897][ T6242] team0 (unregistering): Port device team_slave_0 removed [ 501.186252][ T8967] loop5: detected capacity change from 0 to 256 [ 501.236789][ T8967] FAT-fs (loop5): Directory bread(block 64) failed [ 501.243431][ T8967] FAT-fs (loop5): Directory bread(block 65) failed [ 501.249998][ T8967] FAT-fs (loop5): Directory bread(block 66) failed [ 501.256602][ T8967] FAT-fs (loop5): Directory bread(block 67) failed [ 501.263230][ T8967] FAT-fs (loop5): Directory bread(block 68) failed [ 501.270338][ T8967] FAT-fs (loop5): Directory bread(block 69) failed [ 501.277127][ T8967] FAT-fs (loop5): Directory bread(block 70) failed [ 501.283711][ T8967] FAT-fs (loop5): Directory bread(block 71) failed [ 501.290308][ T8967] FAT-fs (loop5): Directory bread(block 72) failed [ 501.297024][ T8967] FAT-fs (loop5): Directory bread(block 73) failed [ 502.989481][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.014450][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.022401][ T8857] bridge_slave_0: entered allmulticast mode [ 503.030521][ T8857] bridge_slave_0: entered promiscuous mode [ 503.054356][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.135319][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.145521][ T8857] bridge_slave_1: entered allmulticast mode [ 503.171819][ T8857] bridge_slave_1: entered promiscuous mode [ 503.564081][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.640153][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.679015][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 504.459069][ T8857] team0: Port device team_slave_0 added [ 504.477952][ T8997] loop2: detected capacity change from 0 to 64 [ 504.523784][ T8857] team0: Port device team_slave_1 added [ 505.064464][ T9001] comedi comedi0: Minor 3 could not be opened [ 505.206972][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.216665][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.245248][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.328871][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.346718][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.379551][ T8878] bridge_slave_0: entered allmulticast mode [ 505.414476][ T8878] bridge_slave_0: entered promiscuous mode [ 505.461664][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.487173][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.618382][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.759155][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.767940][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.796077][ T8878] bridge_slave_1: entered allmulticast mode [ 505.841711][ T8878] bridge_slave_1: entered promiscuous mode [ 506.436530][ T9005] loop2: detected capacity change from 0 to 4096 [ 506.525081][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.586506][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.614610][ T9005] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 506.670730][ T9005] netlink: 'syz.2.650': attribute type 4 has an invalid length. [ 506.678765][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 506.773267][ T8857] hsr_slave_0: entered promiscuous mode [ 506.791735][ T8857] hsr_slave_1: entered promiscuous mode [ 508.464964][ T9020] loop5: detected capacity change from 0 to 64 [ 508.490236][ T8878] team0: Port device team_slave_0 added [ 508.863395][ T8878] team0: Port device team_slave_1 added [ 509.345244][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.416936][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.445717][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.511225][ T8878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.549144][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.569049][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.645974][ T8878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.525905][ T8878] hsr_slave_0: entered promiscuous mode [ 510.561671][ T8878] hsr_slave_1: entered promiscuous mode [ 510.568072][ T8878] debugfs: 'hsr0' already exists in 'hsr' [ 510.591458][ T8878] Cannot create hsr debugfs directory [ 510.760581][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.773270][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.794735][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.813558][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.822239][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.018068][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.553634][ T6242] bridge_slave_1: left allmulticast mode [ 511.559332][ T6242] bridge_slave_1: left promiscuous mode [ 511.602143][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.678142][ T6242] bridge_slave_0: left allmulticast mode [ 511.694908][ T6242] bridge_slave_0: left promiscuous mode [ 511.700833][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.894601][ T9040] loop8: detected capacity change from 0 to 64 [ 512.774492][ T6005] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 512.971973][ T5882] Bluetooth: hci0: command tx timeout [ 513.061282][ T6005] usb 3-1: Using ep0 maxpacket: 8 [ 513.096421][ T6242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.115996][ T6005] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 513.156717][ T6005] usb 3-1: config 0 has no interface number 0 [ 513.165516][ T6005] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 513.185283][ T6242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.232587][ T6005] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 513.233877][ T6242] bond0 (unregistering): Released all slaves [ 513.241760][ T6005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.241800][ T6005] usb 3-1: Product: syz [ 513.241836][ T6005] usb 3-1: Manufacturer: syz [ 513.241863][ T6005] usb 3-1: SerialNumber: syz [ 513.245213][ T6005] usb 3-1: config 0 descriptor?? [ 515.142977][ T5882] Bluetooth: hci0: command tx timeout [ 515.154992][ T9055] loop8: detected capacity change from 0 to 256 [ 515.241861][ T6005] msi2500 3-1:0.246: Registered as swradio24 [ 515.251923][ T9055] FAT-fs (loop8): Directory bread(block 64) failed [ 515.258472][ T9055] FAT-fs (loop8): Directory bread(block 65) failed [ 515.265215][ T9055] FAT-fs (loop8): Directory bread(block 66) failed [ 515.272833][ T9055] FAT-fs (loop8): Directory bread(block 67) failed [ 515.279449][ T9055] FAT-fs (loop8): Directory bread(block 68) failed [ 515.286092][ T9055] FAT-fs (loop8): Directory bread(block 69) failed [ 515.292706][ T9055] FAT-fs (loop8): Directory bread(block 70) failed [ 515.300471][ T9055] FAT-fs (loop8): Directory bread(block 71) failed [ 515.307203][ T9055] FAT-fs (loop8): Directory bread(block 72) failed [ 515.313754][ T9055] FAT-fs (loop8): Directory bread(block 73) failed [ 515.328788][ T6005] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 515.641384][ T6242] hsr_slave_0: left promiscuous mode [ 515.674255][ T6242] hsr_slave_1: left promiscuous mode [ 515.680480][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.019454][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.171536][ T5882] Bluetooth: hci0: command tx timeout [ 518.215218][ T5882] Bluetooth: hci1: command 0x0406 tx timeout [ 518.591570][ T6069] usb 3-1: USB disconnect, device number 7 [ 518.827948][ T6242] team0 (unregistering): Port device team_slave_1 removed [ 518.932890][ T9076] loop2: detected capacity change from 0 to 64 [ 518.985736][ T6242] team0 (unregistering): Port device team_slave_0 removed [ 519.267341][ T5868] Bluetooth: hci0: command tx timeout [ 520.159575][ T9086] loop8: detected capacity change from 0 to 512 [ 520.190504][ T9086] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.237317][ T9086] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 520.274077][ T9086] EXT4-fs (loop8): DAX unsupported by block device. [ 520.300687][ T8857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.417291][ T8857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.171632][ T8857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.313910][ T8857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.473906][ T9032] chnl_net:caif_netlink_parms(): no params data found [ 522.838130][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 523.169347][ T9113] loop5: detected capacity change from 0 to 256 [ 524.171504][ T5882] Bluetooth: hci5: command 0x0406 tx timeout [ 524.750755][ T9113] FAT-fs (loop5): Directory bread(block 64) failed [ 524.757481][ T9113] FAT-fs (loop5): Directory bread(block 65) failed [ 524.764186][ T9113] FAT-fs (loop5): Directory bread(block 66) failed [ 524.770702][ T9113] FAT-fs (loop5): Directory bread(block 67) failed [ 524.777325][ T9113] FAT-fs (loop5): Directory bread(block 68) failed [ 524.783982][ T9113] FAT-fs (loop5): Directory bread(block 69) failed [ 524.790574][ T9113] FAT-fs (loop5): Directory bread(block 70) failed [ 524.797113][ T9113] FAT-fs (loop5): Directory bread(block 71) failed [ 524.803713][ T9113] FAT-fs (loop5): Directory bread(block 72) failed [ 524.810226][ T9113] FAT-fs (loop5): Directory bread(block 73) failed [ 528.611665][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 528.824376][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.936945][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.951625][ T9032] bridge_slave_0: entered allmulticast mode [ 528.970325][ T9032] bridge_slave_0: entered promiscuous mode [ 528.990111][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.008440][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.032664][ T9032] bridge_slave_1: entered allmulticast mode [ 529.047935][ T9032] bridge_slave_1: entered promiscuous mode [ 529.227688][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.250696][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.411924][ T8878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 529.436051][ T8878] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 529.541031][ T9032] team0: Port device team_slave_0 added [ 529.571009][ T9032] team0: Port device team_slave_1 added [ 529.587847][ T8878] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 529.727093][ T8878] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 529.782111][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.789104][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.816976][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.840661][ T6242] bridge_slave_1: left allmulticast mode [ 529.846494][ T6242] bridge_slave_1: left promiscuous mode [ 529.852647][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.863491][ T6242] bridge_slave_0: left allmulticast mode [ 529.869149][ T6242] bridge_slave_0: left promiscuous mode [ 530.113655][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.758769][ T9158] loop2: detected capacity change from 0 to 64 [ 531.065186][ T6242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.079543][ T6242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.098057][ T6242] bond0 (unregistering): Released all slaves [ 531.139807][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.148080][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.240903][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.331098][ T6242] hsr_slave_0: left promiscuous mode [ 531.359892][ T6242] hsr_slave_1: left promiscuous mode [ 531.378994][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.401394][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.827532][ T6242] team0 (unregistering): Port device team_slave_1 removed [ 532.875009][ T6242] team0 (unregistering): Port device team_slave_0 removed [ 533.021304][ T8360] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 533.631258][ T8360] usb 9-1: Using ep0 maxpacket: 8 [ 533.671843][ T8360] usb 9-1: config 0 has an invalid interface number: 246 but max is 0 [ 533.697979][ T8360] usb 9-1: config 0 has no interface number 0 [ 533.716655][ T8360] usb 9-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 533.861615][ T8360] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 533.890875][ T8360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.910438][ T8360] usb 9-1: Product: syz [ 533.923548][ T8360] usb 9-1: Manufacturer: syz [ 534.097079][ T8360] usb 9-1: SerialNumber: syz [ 534.232289][ T8360] usb 9-1: config 0 descriptor?? [ 534.794016][ T9032] hsr_slave_0: entered promiscuous mode [ 534.800703][ T9032] hsr_slave_1: entered promiscuous mode [ 534.817278][ T8360] msi2500 9-1:0.246: Registered as swradio24 [ 534.834990][ T9032] debugfs: 'hsr0' already exists in 'hsr' [ 534.840961][ T8360] msi2500 9-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 534.873257][ T9032] Cannot create hsr debugfs directory [ 535.277022][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.844622][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.005909][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.013100][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.126246][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.133437][ T6248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.285052][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.555464][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.620983][ T6069] usb 9-1: USB disconnect, device number 5 [ 536.809339][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.816501][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.939241][ T8857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.987824][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.995084][ T6242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.030049][ T8878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.284975][ T9199] loop5: detected capacity change from 0 to 64 [ 539.450011][ T9032] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 540.063208][ T9032] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 540.155938][ T9032] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 540.242571][ T9032] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 541.356129][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.208781][ T9225] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 542.307566][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.558546][ T8857] veth0_vlan: entered promiscuous mode [ 542.632367][ T8857] veth1_vlan: entered promiscuous mode [ 542.646594][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.728092][ T9032] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.792215][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.799431][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.856315][ T8857] veth0_macvtap: entered promiscuous mode [ 542.888351][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.895572][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.920719][ T8857] veth1_macvtap: entered promiscuous mode [ 543.037320][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.107245][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.185321][ T8537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.216741][ T8537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.274086][ T8537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.667975][ T8537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.687110][ T8878] veth0_vlan: entered promiscuous mode [ 544.762474][ T8878] veth1_vlan: entered promiscuous mode [ 544.956350][ T9032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.220508][ T8878] veth0_macvtap: entered promiscuous mode [ 546.191613][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.210808][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.222057][ T8878] veth1_macvtap: entered promiscuous mode [ 546.234239][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.243874][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.251835][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.404344][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.418070][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.838230][ T8537] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.086461][ T6975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.127950][ T9275] hub 9-0:1.0: USB hub found [ 547.136504][ T9275] hub 9-0:1.0: 1 port detected [ 547.160374][ T6247] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.302765][ T5870] Bluetooth: hci2: command tx timeout [ 548.317712][ T8537] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.453404][ T6247] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.494407][ T6247] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.991079][ T8537] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.371455][ T5870] Bluetooth: hci2: command tx timeout [ 550.765677][ T9310] netlink: 'syz.5.709': attribute type 2 has an invalid length. [ 550.773784][ T9310] netlink: 'syz.5.709': attribute type 4 has an invalid length. [ 551.156554][ T8537] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.007236][ T9032] veth0_vlan: entered promiscuous mode [ 552.052721][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.065151][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.074363][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.082893][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.090693][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 552.203506][ T9319] loop5: detected capacity change from 0 to 4096 [ 552.292466][ T9319] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 552.463378][ T5868] Bluetooth: hci2: command tx timeout [ 552.509002][ T9032] veth1_vlan: entered promiscuous mode [ 552.555837][ T9319] netlink: 'syz.5.713': attribute type 4 has an invalid length. [ 552.563646][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.5.713'. [ 553.198539][ T9334] comedi comedi0: Minor 3 could not be opened [ 553.361928][ T8537] bridge_slave_1: left allmulticast mode [ 553.382807][ T8537] bridge_slave_1: left promiscuous mode [ 553.458244][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.540852][ T8537] bridge_slave_0: left allmulticast mode [ 553.555182][ T8537] bridge_slave_0: left promiscuous mode [ 553.563803][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.131410][ T5868] Bluetooth: hci6: command tx timeout [ 554.533416][ T5868] Bluetooth: hci2: command 0x0419 tx timeout [ 554.768464][ T8537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.813785][ T8537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.863581][ T8537] bond0 (unregistering): Released all slaves [ 554.948391][ T9259] chnl_net:caif_netlink_parms(): no params data found [ 556.212159][ T5868] Bluetooth: hci6: command tx timeout [ 556.352581][ T8537] hsr_slave_0: left promiscuous mode [ 556.611323][ T5868] Bluetooth: hci2: command 0x0419 tx timeout [ 557.205315][ T8537] hsr_slave_1: left promiscuous mode [ 557.212904][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.220287][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.315834][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.361225][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.798551][ T8537] veth1_macvtap: left promiscuous mode [ 557.889848][ T8537] veth0_macvtap: left promiscuous mode [ 557.950433][ T8537] veth1_vlan: left promiscuous mode [ 557.969483][ T8537] veth0_vlan: left promiscuous mode [ 558.284911][ T9375] hub 9-0:1.0: USB hub found [ 558.293216][ T5868] Bluetooth: hci6: command tx timeout [ 558.306991][ T9375] hub 9-0:1.0: 1 port detected [ 559.611318][ T8537] team0 (unregistering): Port device team_slave_1 removed [ 559.873535][ T8537] team0 (unregistering): Port device team_slave_0 removed [ 560.371407][ T5868] Bluetooth: hci6: command tx timeout [ 560.769297][ T9388] netlink: 'syz.2.723': attribute type 2 has an invalid length. [ 560.777556][ T9388] netlink: 'syz.2.723': attribute type 4 has an invalid length. [ 563.976015][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.987645][ T9414] comedi comedi0: Minor 3 could not be opened [ 563.994584][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.130745][ T9259] bridge_slave_0: entered allmulticast mode [ 564.805210][ T9259] bridge_slave_0: entered promiscuous mode [ 564.881421][ T9032] veth0_macvtap: entered promiscuous mode [ 564.897147][ T9032] veth1_macvtap: entered promiscuous mode [ 564.976422][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.028556][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.070390][ T9259] bridge_slave_1: entered allmulticast mode [ 565.138371][ T9259] bridge_slave_1: entered promiscuous mode [ 565.490417][ T9259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.606049][ T9259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.077915][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.260712][ T5943] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 566.360292][ T9259] team0: Port device team_slave_0 added [ 566.481649][ T5943] usb 6-1: device descriptor read/64, error -71 [ 566.810932][ T5943] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 566.922219][ T9259] team0: Port device team_slave_1 added [ 566.942647][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.031323][ T5943] usb 6-1: device descriptor read/64, error -71 [ 567.088746][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.151880][ T5943] usb usb6-port1: attempt power cycle [ 567.217380][ T9449] comedi comedi0: Minor 3 could not be opened [ 567.323526][ T8537] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.434697][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.458748][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.551289][ T5943] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 567.575458][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.584377][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.629030][ T5943] usb 6-1: device descriptor read/8, error -71 [ 567.636011][ T9259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.652177][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.659338][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.687132][ T9259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.739328][ T8537] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.779377][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.878070][ T8537] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.901437][ T5943] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 567.952876][ T5943] usb 6-1: device descriptor read/8, error -71 [ 568.015803][ T8537] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.081396][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 568.110590][ T5943] usb usb6-port1: unable to enumerate USB device [ 568.204234][ T9458] loop8: detected capacity change from 0 to 4096 [ 568.219840][ T9458] EXT4-fs: Ignoring removed mblk_io_submit option [ 568.295962][ T9458] EXT4-fs (loop8): Test dummy encryption mode enabled [ 568.334994][ T9458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.786507][ T9259] hsr_slave_0: entered promiscuous mode [ 568.803851][ T9259] hsr_slave_1: entered promiscuous mode [ 568.901695][ T10] IPVS: starting estimator thread 0... [ 569.012036][ T9464] IPVS: using max 21 ests per chain, 50400 per kthread [ 569.887936][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.933211][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.236927][ T8537] bridge_slave_1: left allmulticast mode [ 570.265566][ T8537] bridge_slave_1: left promiscuous mode [ 570.281773][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.307870][ T8537] bridge_slave_0: left allmulticast mode [ 570.403229][ T8537] bridge_slave_0: left promiscuous mode [ 570.409053][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.178542][ T8269] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.383669][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.425775][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.450579][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.469414][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.495401][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.506785][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.739729][ T8537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.768572][ T8537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.816346][ T8537] bond0 (unregistering): Released all slaves [ 572.856351][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.863868][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.871060][ T9320] bridge_slave_0: entered allmulticast mode [ 572.889345][ T9320] bridge_slave_0: entered promiscuous mode [ 573.146013][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.187901][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.221733][ T9320] bridge_slave_1: entered allmulticast mode [ 573.230428][ T9320] bridge_slave_1: entered promiscuous mode [ 573.576133][ T8537] hsr_slave_0: left promiscuous mode [ 573.615954][ T8537] hsr_slave_1: left promiscuous mode [ 573.638817][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.729612][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.742195][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.761251][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.900493][ T8537] veth1_macvtap: left promiscuous mode [ 573.911650][ T8537] veth0_macvtap: left promiscuous mode [ 573.951403][ T8537] veth1_vlan: left promiscuous mode [ 573.956785][ T8537] veth0_vlan: left promiscuous mode [ 574.621470][ T5870] Bluetooth: hci3: command tx timeout [ 576.691286][ T5870] Bluetooth: hci3: command tx timeout [ 578.251380][ T6005] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 578.401332][ T6005] usb 6-1: device descriptor read/64, error -71 [ 578.509338][ T8537] team0 (unregistering): Port device team_slave_1 removed [ 578.599002][ T8537] team0 (unregistering): Port device team_slave_0 removed [ 578.681958][ T6005] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 578.771352][ T5870] Bluetooth: hci3: command tx timeout [ 578.836282][ T6005] usb 6-1: device descriptor read/64, error -71 [ 578.972057][ T6005] usb usb6-port1: attempt power cycle [ 579.065774][ T9541] comedi comedi0: Minor 3 could not be opened [ 579.361460][ T6005] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 579.403155][ T6005] usb 6-1: device descriptor read/8, error -71 [ 579.575062][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.636824][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.691804][ T6005] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 579.744071][ T6005] usb 6-1: device descriptor read/8, error -71 [ 579.890311][ T6005] usb usb6-port1: unable to enumerate USB device [ 580.108380][ T9320] team0: Port device team_slave_0 added [ 580.198572][ T9320] team0: Port device team_slave_1 added [ 580.766385][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.796658][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.851740][ T5870] Bluetooth: hci3: command tx timeout [ 580.880830][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.957459][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.964697][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.051253][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.309935][ T8537] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.574555][ T8537] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.832754][ T9560] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 582.108109][ T8537] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.266740][ T9320] hsr_slave_0: entered promiscuous mode [ 582.294612][ T9320] hsr_slave_1: entered promiscuous mode [ 582.327287][ T9320] debugfs: 'hsr0' already exists in 'hsr' [ 582.404140][ T9320] Cannot create hsr debugfs directory [ 582.760656][ T8537] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.176780][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 583.881043][ T9592] hub 9-0:1.0: USB hub found [ 583.895081][ T9592] hub 9-0:1.0: 1 port detected [ 584.348436][ T9259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 585.163328][ T9259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 585.208747][ T9259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 585.388060][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.405277][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.428684][ T9480] bridge_slave_0: entered allmulticast mode [ 585.443346][ T9480] bridge_slave_0: entered promiscuous mode [ 585.494521][ T9259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 585.589635][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.616462][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.634052][ T9480] bridge_slave_1: entered allmulticast mode [ 585.678638][ T9480] bridge_slave_1: entered promiscuous mode [ 586.054157][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.109417][ T8537] bridge_slave_1: left allmulticast mode [ 586.129585][ T8537] bridge_slave_1: left promiscuous mode [ 586.150574][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.185828][ T8537] bridge_slave_0: left allmulticast mode [ 586.196066][ T8537] bridge_slave_0: left promiscuous mode [ 586.211672][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.361485][ T6069] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 586.501298][ T6069] usb 6-1: device descriptor read/64, error -71 [ 586.752142][ T6069] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 586.817517][ T8537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.835997][ T8537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.855314][ T8537] bond0 (unregistering): Released all slaves [ 586.893887][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.901424][ T6069] usb 6-1: device descriptor read/64, error -71 [ 587.023238][ T6069] usb usb6-port1: attempt power cycle [ 587.078276][ T9480] team0: Port device team_slave_0 added [ 587.089229][ T9480] team0: Port device team_slave_1 added [ 587.218815][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.230943][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.266807][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.330973][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.338342][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.368566][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.387954][ T6069] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 587.412111][ T6069] usb 6-1: device descriptor read/8, error -71 [ 587.525065][ T8537] hsr_slave_0: left promiscuous mode [ 587.543268][ T8537] hsr_slave_1: left promiscuous mode [ 587.561346][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.568991][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.577772][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.585566][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.615015][ T8537] veth1_macvtap: left promiscuous mode [ 587.620570][ T8537] veth0_macvtap: left promiscuous mode [ 587.626703][ T8537] veth1_vlan: left promiscuous mode [ 587.632524][ T8537] veth0_vlan: left promiscuous mode [ 587.656143][ T6069] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 587.692722][ T6069] usb 6-1: device descriptor read/8, error -71 [ 587.725973][ T9623] loop8: detected capacity change from 0 to 512 [ 587.741432][ T9623] EXT4-fs: Ignoring removed mblk_io_submit option [ 587.772862][ T9623] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 587.814148][ T6069] usb usb6-port1: unable to enumerate USB device [ 587.827759][ T9623] EXT4-fs (loop8): DAX unsupported by block device. [ 589.356220][ T8537] team0 (unregistering): Port device team_slave_1 removed [ 589.417800][ T8537] team0 (unregistering): Port device team_slave_0 removed [ 592.764351][ T9480] hsr_slave_0: entered promiscuous mode [ 592.828531][ T9480] hsr_slave_1: entered promiscuous mode [ 592.881300][ T9480] debugfs: 'hsr0' already exists in 'hsr' [ 592.901230][ T9480] Cannot create hsr debugfs directory [ 593.339524][ T9653] hub 9-0:1.0: USB hub found [ 593.443279][ T9653] hub 9-0:1.0: 1 port detected [ 594.788567][ T9320] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 594.944768][ T9320] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 595.143228][ T9320] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 595.220840][ T9320] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 595.283462][ T6005] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 595.641511][ T6005] usb 6-1: device descriptor read/64, error -71 [ 595.862177][ T9259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.881273][ T6005] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 596.031578][ T6005] usb 6-1: device descriptor read/64, error -71 [ 596.141888][ T6005] usb usb6-port1: attempt power cycle [ 596.308804][ T9675] loop2: detected capacity change from 0 to 64 [ 596.401027][ T9259] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.501715][ T6005] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 596.662042][ T6005] usb 6-1: device descriptor read/8, error -71 [ 597.398972][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.406180][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.423027][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.430162][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.540895][ T9259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 597.589635][ T9259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 597.641642][ T6005] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 597.703407][ T6005] usb 6-1: device descriptor read/8, error -71 [ 597.833265][ T6005] usb usb6-port1: unable to enumerate USB device [ 597.860086][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.267030][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.305506][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.312764][ T6974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.536655][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.543900][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.573956][ T9698] tipc: Enabling of bearer rejected, failed to enable media [ 599.681103][ T9480] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 599.735359][ T9480] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 599.779404][ T9259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.823479][ T9704] loop2: detected capacity change from 0 to 64 [ 599.830220][ T9480] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 599.847937][ T9480] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 599.890860][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.967435][ T9259] veth0_vlan: entered promiscuous mode [ 601.048394][ T9259] veth1_vlan: entered promiscuous mode [ 601.608426][ T9259] veth0_macvtap: entered promiscuous mode [ 601.650333][ T9259] veth1_macvtap: entered promiscuous mode [ 601.701011][ T9259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.715021][ T9259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.159761][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.416223][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.456404][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.731397][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.756726][ T6248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.994753][ T6248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.218638][ T6248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.339578][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.442305][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.469197][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.476406][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.493623][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.537131][ T9754] loop2: detected capacity change from 0 to 512 [ 603.538234][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.550561][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.582691][ T9754] EXT4-fs: Ignoring removed mblk_io_submit option [ 603.610832][ T9754] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 603.653062][ T9754] EXT4-fs (loop2): DAX unsupported by block device. [ 604.169804][ T9761] loop2: detected capacity change from 0 to 64 [ 604.273273][ T9480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.828217][ T9320] veth0_vlan: entered promiscuous mode [ 605.018664][ T9320] veth1_vlan: entered promiscuous mode [ 605.207765][ T9320] veth0_macvtap: entered promiscuous mode [ 605.256573][ T9320] veth1_macvtap: entered promiscuous mode [ 605.562368][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.580006][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.590036][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.606996][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.619302][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.774403][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.870492][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.133621][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.257626][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.373878][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.432666][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.436190][ T9776] comedi comedi0: Minor 3 could not be opened [ 606.577171][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.099341][ T6010] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.615326][ T6010] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.661522][ T5868] Bluetooth: hci0: command tx timeout [ 607.905947][ T6010] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.106900][ T6010] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.741281][ T5868] Bluetooth: hci0: command tx timeout [ 609.921971][ T9770] chnl_net:caif_netlink_parms(): no params data found [ 610.366023][ T9802] tipc: Enabling of bearer rejected, failed to enable media [ 610.539404][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.549385][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.567599][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.578857][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.587394][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 610.969477][ T9815] loop5: detected capacity change from 0 to 512 [ 610.984438][ T6010] bridge_slave_1: left allmulticast mode [ 611.012607][ T9815] EXT4-fs: Ignoring removed mblk_io_submit option [ 611.019090][ T6010] bridge_slave_1: left promiscuous mode [ 611.032247][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.096872][ T9815] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 611.118303][ T9815] EXT4-fs (loop5): DAX unsupported by block device. [ 611.139617][ T6010] bridge_slave_0: left allmulticast mode [ 611.158964][ T6010] bridge_slave_0: left promiscuous mode [ 611.181480][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.051737][ T5868] Bluetooth: hci0: command tx timeout [ 612.611473][ T5868] Bluetooth: hci2: command tx timeout [ 612.641362][ T9823] comedi comedi0: Minor 3 could not be opened [ 613.407561][ T9827] loop5: detected capacity change from 0 to 4096 [ 613.573602][ T9827] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 613.773495][ T9831] netlink: 'syz.5.798': attribute type 4 has an invalid length. [ 613.787408][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.798'. [ 614.136020][ T5868] Bluetooth: hci0: command tx timeout [ 614.246933][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.319859][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.348604][ T6010] bond0 (unregistering): Released all slaves [ 614.386787][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.406209][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.420182][ T9770] bridge_slave_0: entered allmulticast mode [ 614.453535][ T9770] bridge_slave_0: entered promiscuous mode [ 614.508424][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.527652][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.553075][ T9770] bridge_slave_1: entered allmulticast mode [ 614.569469][ T9770] bridge_slave_1: entered promiscuous mode [ 614.583990][ T10] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 614.612722][ T9480] veth0_vlan: entered promiscuous mode [ 614.691897][ T5868] Bluetooth: hci2: command tx timeout [ 614.806030][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.822996][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 614.844267][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 614.857813][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.915294][ T9480] veth1_vlan: entered promiscuous mode [ 614.922952][ T10] usbtmc 6-1:16.0: bulk endpoints not found [ 615.118505][ T9770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.128218][ T7651] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 615.550112][ T7651] usb 9-1: Using ep0 maxpacket: 16 [ 615.711685][ T9770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.734801][ T7651] usb 9-1: no configurations [ 615.739628][ T7651] usb 9-1: can't read configurations, error -22 [ 615.827238][ T9770] team0: Port device team_slave_0 added [ 615.855946][ T9770] team0: Port device team_slave_1 added [ 615.910648][ T7651] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 616.004623][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.012523][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.039101][ T9770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.048617][ T9844] comedi comedi0: Minor 3 could not be opened [ 616.071402][ T7651] usb 9-1: Using ep0 maxpacket: 16 [ 616.085492][ T6010] hsr_slave_0: left promiscuous mode [ 616.094230][ T7651] usb 9-1: no configurations [ 616.110151][ T7651] usb 9-1: can't read configurations, error -22 [ 616.116641][ T6010] hsr_slave_1: left promiscuous mode [ 616.122855][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.123232][ T7651] usb usb9-port1: attempt power cycle [ 616.130227][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.156536][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.185436][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.258590][ T6010] veth1_macvtap: left promiscuous mode [ 616.266435][ T6010] veth0_macvtap: left promiscuous mode [ 616.277403][ T6010] veth1_vlan: left promiscuous mode [ 616.293894][ T6010] veth0_vlan: left promiscuous mode [ 616.501523][ T7651] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 616.542043][ T7651] usb 9-1: Using ep0 maxpacket: 16 [ 616.549339][ T7651] usb 9-1: no configurations [ 616.555207][ T7651] usb 9-1: can't read configurations, error -22 [ 616.701285][ T7651] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 616.733756][ T7651] usb 9-1: Using ep0 maxpacket: 16 [ 616.745257][ T7651] usb 9-1: no configurations [ 616.749899][ T7651] usb 9-1: can't read configurations, error -22 [ 616.762675][ T7651] usb usb9-port1: unable to enumerate USB device [ 616.781739][ T5868] Bluetooth: hci2: command tx timeout [ 617.291833][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 617.310300][ T5975] usb 6-1: USB disconnect, device number 24 [ 617.451766][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 617.832991][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.840091][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.873276][ T9770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.922651][ T9850] tipc: Enabling of bearer rejected, failed to enable media [ 618.390703][ T9480] veth0_macvtap: entered promiscuous mode [ 618.851711][ T5868] Bluetooth: hci2: command tx timeout [ 619.098332][ T9868] loop5: detected capacity change from 0 to 512 [ 619.146783][ T9868] EXT4-fs: Ignoring removed mblk_io_submit option [ 619.185898][ T9868] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 619.217804][ T9868] EXT4-fs (loop5): DAX unsupported by block device. [ 620.027762][ T9770] hsr_slave_0: entered promiscuous mode [ 620.170800][ T9770] hsr_slave_1: entered promiscuous mode [ 620.636187][ T9480] veth1_macvtap: entered promiscuous mode [ 620.913946][ T9807] chnl_net:caif_netlink_parms(): no params data found [ 621.122262][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.361275][ T9907] comedi comedi0: Minor 3 could not be opened [ 621.508272][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.852334][ T6036] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.009592][ T6036] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.160566][ T6036] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.249857][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.283209][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.321120][ T9807] bridge_slave_0: entered allmulticast mode [ 622.365115][ T9807] bridge_slave_0: entered promiscuous mode [ 622.392203][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.411936][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.024365][ T9807] bridge_slave_1: entered allmulticast mode [ 623.057758][ T9807] bridge_slave_1: entered promiscuous mode [ 623.067479][ T6036] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.600539][ T6010] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.774421][ T9807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.861039][ T6010] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.005869][ T9807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.284218][ T6010] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.357245][ T5943] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 624.511595][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 624.542267][ T5943] usb 9-1: no configurations [ 624.546898][ T5943] usb 9-1: can't read configurations, error -22 [ 624.633711][ T9807] team0: Port device team_slave_0 added [ 624.710286][ T6010] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.722756][ T5943] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 624.747238][ T9807] team0: Port device team_slave_1 added [ 624.893581][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 624.916930][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.922226][ T8536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.924343][ T5943] usb 9-1: no configurations [ 624.950824][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.996144][ T8536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.021601][ T5943] usb 9-1: can't read configurations, error -22 [ 625.028367][ T5943] usb usb9-port1: attempt power cycle [ 625.207217][ T9807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.233671][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.240631][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.275288][ T9807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.387120][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.405350][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.441478][ T5943] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 625.502993][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 625.511576][ T5943] usb 9-1: no configurations [ 625.516445][ T5943] usb 9-1: can't read configurations, error -22 [ 625.628708][ T9807] hsr_slave_0: entered promiscuous mode [ 625.638199][ T9807] hsr_slave_1: entered promiscuous mode [ 625.661999][ T9807] debugfs: 'hsr0' already exists in 'hsr' [ 625.683083][ T5943] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 625.693253][ T9807] Cannot create hsr debugfs directory [ 625.732294][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 625.738235][ T5943] usb 9-1: no configurations [ 625.773078][ T5943] usb 9-1: can't read configurations, error -22 [ 625.781493][ T5943] usb usb9-port1: unable to enumerate USB device [ 625.913725][ T6010] bridge_slave_1: left allmulticast mode [ 625.919420][ T6010] bridge_slave_1: left promiscuous mode [ 625.935552][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.961923][ T6010] bridge_slave_0: left allmulticast mode [ 625.967635][ T6010] bridge_slave_0: left promiscuous mode [ 625.981452][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.576124][ T9939] loop9: detected capacity change from 0 to 64 [ 628.484243][ T9950] loop9: detected capacity change from 0 to 512 [ 628.509924][ T9950] EXT4-fs: Ignoring removed mblk_io_submit option [ 628.561180][ T9950] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 628.584429][ T9950] EXT4-fs (loop9): DAX unsupported by block device. [ 628.806040][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.928108][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.994263][ T6010] bond0 (unregistering): Released all slaves [ 629.442488][ T9938] tipc: Enabling of bearer rejected, failed to enable media [ 629.732061][ T9770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 630.143059][ T9770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 630.203649][ T9770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 630.438103][ T9770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 630.523005][ T9984] loop5: detected capacity change from 0 to 64 [ 630.566624][ T6010] hsr_slave_0: left promiscuous mode [ 630.581872][ T6010] hsr_slave_1: left promiscuous mode [ 630.587909][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.606618][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.631818][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.648285][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.721578][ T6010] veth1_macvtap: left promiscuous mode [ 630.737104][ T6010] veth0_macvtap: left promiscuous mode [ 630.752003][ T6010] veth1_vlan: left promiscuous mode [ 630.770619][ T6010] veth0_vlan: left promiscuous mode [ 631.911409][ T9993] comedi comedi0: Minor 3 could not be opened [ 634.034217][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.043183][ T30] audit: type=1800 audit(1757965904.213:21): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.824" name="/" dev="9p" ino=2 res=0 errno=0 [ 635.431410][ T5943] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 635.593391][ T5943] usb 10-1: Using ep0 maxpacket: 16 [ 635.615032][ T5943] usb 10-1: no configurations [ 635.619706][ T5943] usb 10-1: can't read configurations, error -22 [ 635.801256][ T5943] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 635.874432][T10016] loop2: detected capacity change from 0 to 64 [ 635.961259][ T5943] usb 10-1: Using ep0 maxpacket: 16 [ 635.972459][ T5943] usb 10-1: no configurations [ 635.977912][ T5943] usb 10-1: can't read configurations, error -22 [ 636.021420][ T5943] usb usb10-port1: attempt power cycle [ 636.315758][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 636.363641][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 636.371477][ T5943] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 636.412658][ T5943] usb 10-1: Using ep0 maxpacket: 16 [ 636.420529][ T5943] usb 10-1: no configurations [ 636.429679][ T5943] usb 10-1: can't read configurations, error -22 [ 636.581441][ T5943] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 636.625066][ T5943] usb 10-1: Using ep0 maxpacket: 16 [ 636.657144][ T5943] usb 10-1: no configurations [ 636.662029][ T5943] usb 10-1: can't read configurations, error -22 [ 636.684388][ T5943] usb usb10-port1: unable to enumerate USB device [ 637.658572][T10028] comedi comedi0: Minor 3 could not be opened [ 637.670671][T10030] tipc: Enabling of bearer rejected, failed to enable media [ 637.997414][T10033] hub 9-0:1.0: USB hub found [ 638.056670][T10033] hub 9-0:1.0: 1 port detected [ 638.286957][T10036] loop8: detected capacity change from 0 to 64 [ 638.317268][ T9770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.572601][T10038] loop9: detected capacity change from 0 to 512 [ 639.359521][T10038] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.430568][ T9770] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.448602][T10038] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 639.488659][T10038] EXT4-fs (loop9): DAX unsupported by block device. [ 639.562184][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.569388][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.649420][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.656607][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.134246][T10043] loop8: detected capacity change from 0 to 4096 [ 640.198966][T10043] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 640.556129][T10051] netlink: 'syz.8.838': attribute type 4 has an invalid length. [ 640.650762][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.8.838'. [ 641.593898][ T9807] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 641.792104][ T9807] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 641.837353][ T9807] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 642.027672][ T9807] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 644.084807][ T9770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.426218][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.583547][ T9770] veth0_vlan: entered promiscuous mode [ 644.636245][ T9807] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.767037][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.774235][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.838505][ T9770] veth1_vlan: entered promiscuous mode [ 645.003187][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.010343][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.813142][ T9770] veth0_macvtap: entered promiscuous mode [ 645.976058][ T9770] veth1_macvtap: entered promiscuous mode [ 646.124943][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.202986][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.258689][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.284541][ T1138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.539226][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.695267][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.593349][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.605722][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.868016][T10108] loop5: detected capacity change from 0 to 64 [ 647.935615][ T6980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.939413][ T9807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.024288][ T6980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.385676][T10115] loop9: detected capacity change from 0 to 64 [ 651.316177][T10130] loop3: detected capacity change from 0 to 64 [ 651.811468][T10135] loop5: detected capacity change from 0 to 512 [ 652.622659][T10135] EXT4-fs: Ignoring removed mblk_io_submit option [ 652.936476][T10135] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 653.020948][T10135] EXT4-fs (loop5): DAX unsupported by block device. [ 653.804655][T10148] hub 9-0:1.0: USB hub found [ 653.810685][T10148] hub 9-0:1.0: 1 port detected [ 654.254389][ T9807] veth0_vlan: entered promiscuous mode [ 654.598994][ T9807] veth1_vlan: entered promiscuous mode [ 654.714280][ T9807] veth0_macvtap: entered promiscuous mode [ 654.754587][ T9807] veth1_macvtap: entered promiscuous mode [ 655.337779][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.429421][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.622108][ T6980] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.679698][ T6980] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.831177][ T6980] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.899252][ T6980] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.490945][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.541947][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.733374][T10160] loop8: detected capacity change from 0 to 32768 [ 656.898358][T10160] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 656.907070][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.927740][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.036020][T10160] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 657.365636][T10171] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 657.372179][T10171] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 657.380731][T10171] vhci_hcd vhci_hcd.0: Device attached [ 658.003688][ T6005] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 658.038630][T10168] loop2: detected capacity change from 0 to 4096 [ 658.112662][T10172] vhci_hcd: connection closed [ 658.170281][ T6248] vhci_hcd: stop threads [ 658.414668][ T6248] vhci_hcd: release socket [ 658.569363][ T6248] vhci_hcd: disconnect device [ 658.845581][ T8269] ocfs2: Unmounting device (7,8) on (node local) [ 658.937192][T10168] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 659.577413][T10177] netlink: 'syz.2.862': attribute type 4 has an invalid length. [ 659.658647][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'. [ 661.604436][ T5975] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 661.870939][ T5975] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 661.942906][ T5975] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 662.041166][ T5975] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.121233][ T5975] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.256365][ T5975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.651444][ T5975] usbtmc 9-1:16.0: bulk endpoints not found [ 662.848622][T10195] usb 9-1: USB disconnect, device number 14 [ 663.165541][T10197] hub 9-0:1.0: USB hub found [ 663.193936][T10197] hub 9-0:1.0: 1 port detected [ 663.290526][T10201] comedi comedi0: Minor 3 could not be opened [ 663.321359][ T6005] vhci_hcd: vhci_device speed not set [ 665.148981][T10214] loop9: detected capacity change from 0 to 512 [ 665.239154][T10214] EXT4-fs: Ignoring removed mblk_io_submit option [ 665.286560][T10214] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 665.311446][T10214] EXT4-fs (loop9): DAX unsupported by block device. [ 667.528568][T10215] loop8: detected capacity change from 0 to 32768 [ 667.600284][T10215] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 667.808325][T10215] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 668.146791][ T8269] ocfs2: Unmounting device (7,8) on (node local) [ 670.121794][T10257] loop5: detected capacity change from 0 to 4096 [ 670.395041][T10257] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 670.582205][T10270] netlink: 'syz.5.881': attribute type 4 has an invalid length. [ 671.077416][T10272] loop7: detected capacity change from 0 to 64 [ 671.114208][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.881'. [ 674.015761][T10295] random: crng reseeded on system resumption [ 676.839758][T10337] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 676.846300][T10337] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 676.854387][T10337] vhci_hcd vhci_hcd.0: Device attached [ 676.865642][T10338] vhci_hcd: connection closed [ 676.872571][ T6044] vhci_hcd: stop threads [ 676.934263][ T6044] vhci_hcd: release socket [ 676.951683][ T6044] vhci_hcd: disconnect device [ 678.571698][T10351] loop7: detected capacity change from 0 to 1024 [ 679.004111][T10352] hub 9-0:1.0: USB hub found [ 679.009576][T10352] hub 9-0:1.0: 1 port detected [ 681.934309][T10368] loop7: detected capacity change from 0 to 4096 [ 681.991826][T10368] EXT4-fs: Ignoring removed mblk_io_submit option [ 682.060143][T10368] EXT4-fs (loop7): Test dummy encryption mode enabled [ 682.163119][T10368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.646642][ T7651] IPVS: starting estimator thread 0... [ 683.222004][T10386] IPVS: using max 21 ests per chain, 50400 per kthread [ 683.641173][ T30] audit: type=1800 audit(1757965954.033:22): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.903" name="/" dev="9p" ino=2 res=0 errno=0 [ 685.436115][T10414] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 685.442664][T10414] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 685.451082][T10414] vhci_hcd vhci_hcd.0: Device attached [ 685.467144][T10416] vhci_hcd: connection closed [ 685.471659][ T6244] vhci_hcd: stop threads [ 685.711645][ T10] usb 51-1: new high-speed USB device number 3 using vhci_hcd [ 685.741543][ T6244] vhci_hcd: release socket [ 685.746031][ T6244] vhci_hcd: disconnect device [ 685.750888][ T10] usb 51-1: enqueue for inactive port 0 [ 685.961246][ T10] vhci_hcd: vhci_device speed not set [ 688.814084][T10436] loop3: detected capacity change from 0 to 64 [ 689.483462][ T9807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.356339][T10468] loop5: detected capacity change from 0 to 4096 [ 695.101495][T10468] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 695.335919][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.348280][T10492] netlink: 'syz.5.928': attribute type 4 has an invalid length. [ 695.356769][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.928'. [ 697.411226][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 700.518682][ T6005] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 701.466351][ T6005] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.496746][ T6005] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.509887][ T6005] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 701.521188][ T6005] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 701.529338][ T6005] usb 10-1: SerialNumber: syz [ 701.805516][ T6005] usb 10-1: 0:2 : does not exist [ 701.993642][ T6005] usb 10-1: USB disconnect, device number 9 [ 702.286152][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.760262][T10557] loop5: detected capacity change from 0 to 4096 [ 705.017755][T10557] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 705.230558][T10572] netlink: 'syz.5.945': attribute type 4 has an invalid length. [ 705.238613][T10572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.945'. [ 710.440798][T10613] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 710.447359][T10613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 710.455316][T10613] vhci_hcd vhci_hcd.0: Device attached [ 710.466855][T10614] vhci_hcd: connection closed [ 710.469572][ T6244] vhci_hcd: stop threads [ 710.491254][ T6244] vhci_hcd: release socket [ 710.511189][ T6244] vhci_hcd: disconnect device [ 710.682022][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.956'. [ 712.742605][ T6005] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 712.786948][T10632] loop5: detected capacity change from 0 to 4096 [ 712.921369][T10632] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 713.030030][ T6005] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 713.039531][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.086904][ T6005] usb 4-1: Product: syz [ 713.405773][T10638] netlink: 'syz.5.964': attribute type 4 has an invalid length. [ 713.413531][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz.5.964'. [ 714.322768][ T6005] usb 4-1: Manufacturer: syz [ 714.327542][ T6005] usb 4-1: SerialNumber: syz [ 715.522324][ T6005] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 716.811498][ T5943] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 716.906429][ T5943] usb 4-1: ath9k_htc: USB layer deinitialized [ 717.621492][ T6005] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 719.891176][ T6005] usb 9-1: Using ep0 maxpacket: 8 [ 720.223596][ T6005] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 720.231831][ T6005] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.261186][ T6005] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.273419][ T6005] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.284968][ T6005] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 720.305178][ T6005] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 720.332676][ T6005] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.351186][ T6005] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.415740][ T6005] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.470665][ T6005] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 720.556965][ T6005] usb 9-1: unable to read config index 2 descriptor/start: -71 [ 720.597175][ T6005] usb 9-1: can't read configurations, error -71 [ 722.731790][ T6005] usb 4-1: USB disconnect, device number 5 [ 725.691169][ T6005] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 725.844362][ T6005] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.119483][ T6005] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 726.139190][ T6005] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.152652][ T6005] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 726.162145][ T6005] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.411800][ T6005] usb 10-1: usb_control_msg returned -32 [ 726.417565][ T6005] usbtmc 10-1:16.0: can't read capabilities [ 726.505175][ T6005] usb 10-1: USB disconnect, device number 10 [ 728.225395][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 729.441312][T10705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 729.462511][T10705] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 729.492308][T10705] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 729.498547][T10705] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 729.544512][T10705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 729.551070][T10705] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 729.566520][T10705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 729.572986][T10705] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 729.587262][T10705] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 729.593816][T10705] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 729.609798][T10705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 729.616457][T10705] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 729.633270][T10705] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 731.493076][ T5868] Bluetooth: hci5: command 0x0406 tx timeout [ 731.493090][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 731.571787][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 731.651217][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 731.657481][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 731.657603][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 733.581314][ T5882] Bluetooth: hci1: command 0x0406 tx timeout [ 733.587383][ T5882] Bluetooth: hci5: command 0x0406 tx timeout [ 733.842923][T10735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.992'. [ 733.867159][ T5882] Bluetooth: hci4: command 0x0406 tx timeout [ 733.873626][ T5882] Bluetooth: hci0: command 0x0406 tx timeout [ 733.879801][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 733.886086][ T5882] Bluetooth: hci2: command 0x0c1a tx timeout [ 735.353770][ T7651] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 735.963090][ T7651] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.971241][T10722] Bluetooth: hci2: command 0x0c1a tx timeout [ 736.031131][ T7651] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 736.361168][ T7651] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.382100][ T7651] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 736.392565][ T7651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.141921][ T7651] usb 6-1: usb_control_msg returned -32 [ 737.161204][ T7651] usbtmc 6-1:16.0: can't read capabilities [ 737.286024][ T7651] usb 6-1: USB disconnect, device number 25 [ 737.791659][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1000'. [ 737.800738][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1000'. [ 741.764566][T10795] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1009'. [ 743.139268][ T24] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 743.459631][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 743.518306][ T24] usb 10-1: config 0 has no interface number 0 [ 743.588844][ T24] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 743.712567][ T24] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 743.841558][ T24] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 743.920336][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.026357][ T24] usb 10-1: config 0 descriptor?? [ 744.048511][T10804] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 744.091854][ T24] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 744.518701][T10818] loop5: detected capacity change from 0 to 512 [ 747.302371][T10818] EXT4-fs: error -4 creating inode table initialization thread [ 747.310840][T10818] EXT4-fs (loop5): mount failed [ 747.316281][ T6069] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 747.868275][T10814] loop8: detected capacity change from 0 to 512 [ 748.161471][ T5975] usb 10-1: USB disconnect, device number 11 [ 751.168948][T10862] netlink: 'syz.5.1029': attribute type 2 has an invalid length. [ 751.232897][T10862] netlink: 'syz.5.1029': attribute type 4 has an invalid length. [ 752.914052][T10858] loop2: detected capacity change from 0 to 32768 [ 752.920763][ T6069] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 753.058247][T10858] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1028 (10858) [ 753.134712][ T6069] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 753.208870][ T6069] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 753.289610][T10858] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 753.321899][ T6069] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.364818][ T6069] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 753.417410][ T6069] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.479116][T10858] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 753.491713][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 753.492202][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 753.576576][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 753.651790][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 753.678672][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 753.687664][ T6069] usb 8-1: GET_CAPABILITIES returned 0 [ 753.687737][ T6069] usbtmc 8-1:16.0: can't read capabilities [ 753.789252][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 753.798280][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 753.824288][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 753.834990][T10858] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 753.847206][T10858] BTRFS error (device loop2): open_ctree failed: -12 [ 753.883523][ T6069] usb 8-1: USB disconnect, device number 10 [ 755.408456][T10896] loop3: detected capacity change from 0 to 256 [ 756.846907][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.181381][T10896] FAT-fs (loop3): Directory bread(block 64) failed [ 758.463916][T10896] FAT-fs (loop3): Directory bread(block 65) failed [ 758.481978][T10896] FAT-fs (loop3): Directory bread(block 66) failed [ 758.521200][ T6069] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 758.540676][T10896] FAT-fs (loop3): Directory bread(block 67) failed [ 758.571478][T10896] FAT-fs (loop3): Directory bread(block 68) failed [ 758.601396][T10896] FAT-fs (loop3): Directory bread(block 69) failed [ 758.673449][T10896] FAT-fs (loop3): Directory bread(block 70) failed [ 758.683509][T10896] FAT-fs (loop3): Directory bread(block 71) failed [ 758.708045][T10896] FAT-fs (loop3): Directory bread(block 72) failed [ 758.722654][ T6069] usb 3-1: Using ep0 maxpacket: 8 [ 758.736618][T10896] FAT-fs (loop3): Directory bread(block 73) failed [ 758.737349][T10895] : entered promiscuous mode [ 758.769785][ T6069] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 758.788939][ T6069] usb 3-1: config 0 has no interface number 0 [ 758.851219][ T6069] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 758.878840][T10902] loop8: detected capacity change from 0 to 4096 [ 758.897607][ T6069] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 758.909019][ T6069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.956609][ T6069] usb 3-1: Product: syz [ 758.999286][ T6069] usb 3-1: Manufacturer: syz [ 759.030849][ T6069] usb 3-1: SerialNumber: syz [ 759.055701][ T6069] usb 3-1: config 0 descriptor?? [ 759.126338][T10902] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 759.336213][T10924] netlink: 'syz.8.1036': attribute type 4 has an invalid length. [ 759.344252][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1036'. [ 760.061762][ T6069] msi2500 3-1:0.246: Registered as swradio24 [ 760.067801][ T6069] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 762.850971][T10952] loop3: detected capacity change from 0 to 512 [ 762.866491][T10952] ext4: Unknown parameter 'dont_hash' [ 763.846898][T10956] loop3: detected capacity change from 0 to 4096 [ 763.895470][T10959] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 763.924429][T10960] loop9: detected capacity change from 0 to 8 [ 764.819418][T10960] SQUASHFS error: xz decompression failed, data probably corrupt [ 764.901628][T10960] SQUASHFS error: Failed to read block 0x108: -5 [ 764.908036][T10960] SQUASHFS error: Unable to read metadata cache entry [106] [ 765.069904][T10960] SQUASHFS error: Unable to read inode 0x11f [ 766.217994][ T7651] usb 3-1: USB disconnect, device number 8 [ 769.756533][T11014] comedi comedi0: Minor 3 could not be opened [ 770.440391][T11000] loop9: detected capacity change from 0 to 32768 [ 770.743882][T11000] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 770.828307][T11000] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 772.009586][ T9480] ocfs2: Unmounting device (7,9) on (node local) [ 773.468980][T11034] loop8: detected capacity change from 0 to 32768 [ 773.551910][T11034] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1073 (11034) [ 773.631960][T11034] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 773.685916][T11034] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 774.102200][T11034] BTRFS info (device loop8): rebuilding free space tree [ 774.507959][T11034] BTRFS info (device loop8): disabling free space tree [ 774.541292][T11034] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 774.652992][T11034] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 775.205450][T11034] BTRFS info (device loop8): enabling ssd optimizations [ 775.230435][T11034] BTRFS info (device loop8): force clearing of disk cache [ 775.268231][T11034] BTRFS info (device loop8): enabling auto defrag [ 775.551222][T11034] BTRFS info (device loop8): doing ref verification [ 775.565807][T11034] BTRFS info (device loop8): force zlib compression, level 3 [ 776.391501][T11072] loop9: detected capacity change from 0 to 64 [ 776.491035][ T8269] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 778.930850][T11094] loop8: detected capacity change from 0 to 128 [ 779.107574][T11094] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 779.146071][T11094] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.025640][ T30] audit: type=1326 audit(1757966050.403:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c698eba9 code=0x7ffc0000 [ 780.183642][ T30] audit: type=1326 audit(1757966050.403:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c698eba9 code=0x7ffc0000 [ 780.258175][ T8269] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.328387][ T30] audit: type=1326 audit(1757966050.453:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb5c698eba9 code=0x7ffc0000 [ 780.470243][ T30] audit: type=1326 audit(1757966050.453:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c698eba9 code=0x7ffc0000 [ 780.508208][ T30] audit: type=1326 audit(1757966050.453:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c698eba9 code=0x7ffc0000 [ 780.558353][ T30] audit: type=1326 audit(1757966050.953:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 780.731658][ T30] audit: type=1326 audit(1757966050.953:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 780.754845][ T30] audit: type=1326 audit(1757966050.993:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 781.647911][ T30] audit: type=1326 audit(1757966050.993:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 782.121152][ T30] audit: type=1326 audit(1757966050.993:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c578eba9 code=0x7ffc0000 [ 783.544379][T11131] loop9: detected capacity change from 0 to 64 [ 784.199814][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 784.209637][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 784.239830][T11144] loop3: detected capacity change from 0 to 64 [ 784.328972][ T6039] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.357424][ T6039] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.372998][ T6039] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.411140][ T6039] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.372035][T11163] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 787.372035][T11163] program syz.7.1108 not setting count and/or reply_len properly [ 789.858328][T11177] loop5: detected capacity change from 0 to 512 [ 789.958582][T11177] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1114: casefold flag without casefold feature [ 790.053982][T11177] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1114: couldn't read orphan inode 15 (err -117) [ 790.387406][T11177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.576600][ T8231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.934591][T11195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.560767][T11204] loop9: detected capacity change from 0 to 8192 [ 793.704925][T11204] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 793.913764][ T8360] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 794.153269][ T8360] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 794.172589][ T8360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.222357][ T8360] usb 8-1: config 0 descriptor?? [ 794.573792][ T8360] cp210x 8-1:0.0: cp210x converter detected [ 794.597174][T11226] loop8: detected capacity change from 0 to 64 [ 795.155945][ T8360] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 795.356422][ T8360] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 795.571044][ T8360] usb 8-1: cp210x converter now attached to ttyUSB0 [ 795.663498][ T8360] usb 8-1: USB disconnect, device number 11 [ 795.705650][ T8360] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 795.765685][ T8360] cp210x 8-1:0.0: device disconnected [ 796.444565][T11239] loop5: detected capacity change from 0 to 4096 [ 796.629394][T11239] EXT4-fs: Ignoring removed mblk_io_submit option [ 796.726036][T11239] EXT4-fs (loop5): Test dummy encryption mode enabled [ 796.832222][T11239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.260901][ T8231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.273470][ T6069] IPVS: starting estimator thread 0... [ 798.401254][T11253] IPVS: using max 21 ests per chain, 50400 per kthread [ 798.879172][T11261] loop5: detected capacity change from 0 to 64 [ 800.419027][T11269] loop9: detected capacity change from 0 to 4096 [ 800.507030][T11269] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 800.525526][T11275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 800.532082][T11275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.543415][T11275] vhci_hcd vhci_hcd.0: Device attached [ 800.803580][T11276] vhci_hcd: connection closed [ 800.833308][ T6039] vhci_hcd: stop threads [ 801.681135][ T6039] vhci_hcd: release socket [ 801.695940][ T6039] vhci_hcd: disconnect device [ 801.751520][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 801.784418][T11269] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 801.785166][ T10] usb 37-1: enqueue for inactive port 0 [ 801.814662][T11269] ntfs3(loop9): Failed to load $Extend (-22). [ 801.841138][T11269] ntfs3(loop9): Failed to initialize $Extend. [ 801.916767][ T10] vhci_hcd: vhci_device speed not set [ 802.534579][T11293] comedi comedi0: Minor 3 could not be opened [ 804.106024][T11300] loop2: detected capacity change from 0 to 4096 [ 804.160742][T11300] EXT4-fs: Ignoring removed mblk_io_submit option [ 804.255299][T11300] EXT4-fs (loop2): Test dummy encryption mode enabled [ 804.463691][T11300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.344071][ T8196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.102820][T11340] netlink: 'syz.8.1159': attribute type 2 has an invalid length. [ 810.113131][T11340] netlink: 'syz.8.1159': attribute type 4 has an invalid length. [ 810.371298][T11336] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 810.377834][T11336] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 810.463092][T11346] loop5: detected capacity change from 0 to 64 [ 810.679829][T11337] vhci_hcd: connection closed [ 810.679889][T11336] vhci_hcd vhci_hcd.0: Device attached [ 810.725564][ T6039] vhci_hcd: stop threads [ 811.596167][ T6039] vhci_hcd: release socket [ 811.731148][ T6039] vhci_hcd: disconnect device [ 813.709713][T11361] loop8: detected capacity change from 0 to 4096 [ 813.788227][T11361] EXT4-fs: Ignoring removed mblk_io_submit option [ 813.922154][T11361] EXT4-fs (loop8): Test dummy encryption mode enabled [ 813.989009][T11361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.656767][T11401] netlink: 'syz.9.1180': attribute type 2 has an invalid length. [ 817.664764][T11401] netlink: 'syz.9.1180': attribute type 4 has an invalid length. [ 818.159498][ T8269] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.220586][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.733995][T11419] loop5: detected capacity change from 0 to 64 [ 819.901499][ T5882] Bluetooth: hci2: command 0x0c1a tx timeout [ 824.837340][T11460] loop5: detected capacity change from 0 to 512 [ 825.050569][T11456] loop9: detected capacity change from 0 to 4096 [ 825.079521][T11461] netlink: 'syz.3.1195': attribute type 3 has an invalid length. [ 825.087405][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 825.166488][T11456] EXT4-fs: Ignoring removed mblk_io_submit option [ 825.190640][T11460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 825.330156][T11456] EXT4-fs (loop9): Test dummy encryption mode enabled [ 825.389827][T11460] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 825.742036][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'. [ 825.760233][T11456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.203327][T11473] loop3: detected capacity change from 0 to 512 [ 827.639036][ T30] audit: type=1326 audit(1757966097.973:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 827.916990][ T30] audit: type=1326 audit(1757966097.973:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 828.048354][ T30] audit: type=1326 audit(1757966097.973:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 828.161149][ T30] audit: type=1326 audit(1757966097.973:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 828.311311][ T30] audit: type=1326 audit(1757966097.973:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 828.378968][ T30] audit: type=1326 audit(1757966097.973:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 828.460022][ T30] audit: type=1326 audit(1757966097.973:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 829.670017][ T30] audit: type=1326 audit(1757966097.973:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 829.741857][ T9480] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.778531][ T30] audit: type=1326 audit(1757966097.973:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 829.922631][ T30] audit: type=1326 audit(1757966097.983:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348458eba9 code=0x7ffc0000 [ 832.167844][T11509] loop7: detected capacity change from 0 to 64 [ 833.643458][T11518] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 834.556722][T11525] loop2: detected capacity change from 0 to 512 [ 835.796513][T11525] EXT4-fs warning (device loop2): ext4_xattr_inode_get:540: inode #11: comm syz.2.1213: ea_inode file size=0 entry size=6 [ 835.920163][T11525] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 836.190333][T11525] ------------[ cut here ]------------ [ 836.196257][T11525] EA inode 11 i_nlink=2 [ 836.216796][T11525] WARNING: CPU: 1 PID: 11525 at fs/ext4/xattr.c:1051 ext4_xattr_inode_update_ref+0x4a6/0x570 [ 836.232665][T11525] Modules linked in: [ 836.236811][T11525] CPU: 1 UID: 0 PID: 11525 Comm: syz.2.1213 Not tainted syzkaller #0 PREEMPT(full) [ 836.246765][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.257386][T11525] RIP: 0010:ext4_xattr_inode_update_ref+0x4a6/0x570 [ 836.264684][T11525] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 73 40 44 89 e2 48 c7 c7 20 03 c8 8b e8 7b 78 f0 fe 90 <0f> 0b 90 90 e9 40 fe ff ff e8 0c d3 31 ff 44 0f b6 3d bb 35 0a 0e [ 836.284767][T11525] RSP: 0018:ffffc9001255f430 EFLAGS: 00010282 [ 836.290854][T11525] RAX: 0000000000000000 RBX: ffff88806d3815b8 RCX: ffffc9000d91a000 [ 836.299275][T11525] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 836.308184][T11525] RBP: ffffc9001255f4f0 R08: 0000000000000001 R09: 0000000000000000 [ 836.316485][T11525] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 836.325848][T11525] R13: 1ffff920024abe89 R14: ffff88806d381690 R15: 0000000000000000 [ 836.334893][T11525] FS: 00007fb2c39f66c0(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 836.343929][T11525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.350524][T11525] CR2: 000000110c30fc59 CR3: 000000006a06d000 CR4: 0000000000350ef0 [ 836.358637][T11525] Call Trace: [ 836.361989][T11525] [ 836.364934][T11525] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 836.371391][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.377052][T11525] ? __ext4_journal_ensure_credits+0x25e/0x2f0 [ 836.383293][T11525] ext4_xattr_inode_dec_ref_all+0x52a/0xed0 [ 836.389236][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.394935][T11525] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 836.401462][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.407123][T11525] ? errseq_check+0x4f/0x90 [ 836.411679][T11525] ext4_xattr_delete_inode+0x4ee/0xb80 [ 836.417162][T11525] ? irqentry_exit+0x3b/0x90 [ 836.423147][T11525] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 836.429147][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.435854][T11525] ext4_evict_inode+0x7d6/0x18e0 [ 836.440839][T11525] ? __pfx_ext4_evict_inode+0x10/0x10 [ 836.446380][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.452716][T11525] ? __pfx_ext4_evict_inode+0x10/0x10 [ 836.458125][T11525] evict+0x3e6/0x920 [ 836.462105][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.467770][T11525] ? __pfx_evict+0x10/0x10 [ 836.472318][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.477991][T11525] iput+0x521/0x880 [ 836.481877][T11525] ? __pfx_ext4_drop_inode+0x10/0x10 [ 836.487194][T11525] ext4_orphan_cleanup+0x731/0x11e0 [ 836.492459][T11525] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 836.498129][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503849][T11525] ? ext4_register_li_request+0xec/0x9b0 [ 836.509528][T11525] ext4_fill_super+0x8a38/0xafa0 [ 836.514560][T11525] ? __pfx_ext4_fill_super+0x10/0x10 [ 836.519874][T11525] ? do_raw_spin_lock+0x12c/0x2b0 [ 836.526265][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.532951][T11525] ? find_held_lock+0x2b/0x80 [ 836.537653][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.543371][T11525] ? set_blocksize+0x406/0x500 [ 836.548166][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.553865][T11525] ? sb_set_blocksize+0x176/0x1d0 [ 836.558918][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.564641][T11525] ? setup_bdev_super+0x369/0x730 [ 836.569705][T11525] get_tree_bdev_flags+0x38c/0x620 [ 836.574904][T11525] ? __pfx_ext4_fill_super+0x10/0x10 [ 836.580240][T11525] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 836.585969][T11525] ? apparmor_capable+0x114/0x1d0 [ 836.591019][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.596719][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.602436][T11525] ? security_capable+0x7e/0x260 [ 836.607397][T11525] vfs_get_tree+0x8e/0x340 [ 836.612111][T11525] path_mount+0x1513/0x2000 [ 836.616646][T11525] ? __pfx_path_mount+0x10/0x10 [ 836.621576][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.628507][T11525] ? kmem_cache_free+0x2d1/0x4d0 [ 836.634552][T11525] ? putname+0x154/0x1a0 [ 836.638825][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.644531][T11525] ? putname+0x154/0x1a0 [ 836.648799][T11525] ? __x64_sys_mount+0x28d/0x310 [ 836.653805][T11525] __x64_sys_mount+0x28d/0x310 [ 836.658595][T11525] ? __pfx___x64_sys_mount+0x10/0x10 [ 836.663991][T11525] do_syscall_64+0xcd/0x4e0 [ 836.668514][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.674452][T11525] RIP: 0033:0x7fb2c579034a [ 836.678874][T11525] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.698573][T11525] RSP: 002b:00007fb2c39f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 836.707259][T11525] RAX: ffffffffffffffda RBX: 00007fb2c39f5ef0 RCX: 00007fb2c579034a [ 836.715285][T11525] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb2c39f5eb0 [ 836.723324][T11525] RBP: 0000200000000180 R08: 00007fb2c39f5ef0 R09: 0000000000800700 [ 836.732685][T11525] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 836.740666][T11525] R13: 00007fb2c39f5eb0 R14: 0000000000000473 R15: 0000200000000680 [ 836.749719][T11525] [ 836.752796][T11525] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 836.760081][T11525] CPU: 1 UID: 0 PID: 11525 Comm: syz.2.1213 Not tainted syzkaller #0 PREEMPT(full) [ 836.769463][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.779522][T11525] Call Trace: [ 836.782801][T11525] [ 836.785731][T11525] dump_stack_lvl+0x3d/0x1f0 [ 836.790362][T11525] vpanic+0x6e8/0x7a0 [ 836.794384][T11525] ? __pfx_vpanic+0x10/0x10 [ 836.798934][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.804594][T11525] ? ext4_xattr_inode_update_ref+0x4a6/0x570 [ 836.810610][T11525] panic+0xca/0xd0 [ 836.814366][T11525] ? __pfx_panic+0x10/0x10 [ 836.818839][T11525] check_panic_on_warn+0xab/0xb0 [ 836.823791][T11525] __warn+0xf6/0x3c0 [ 836.827694][T11525] ? ext4_xattr_inode_update_ref+0x4a6/0x570 [ 836.833713][T11525] report_bug+0x3c3/0x580 [ 836.838076][T11525] ? ext4_xattr_inode_update_ref+0x4a6/0x570 [ 836.844095][T11525] handle_bug+0x184/0x210 [ 836.848443][T11525] exc_invalid_op+0x17/0x50 [ 836.852966][T11525] asm_exc_invalid_op+0x1a/0x20 [ 836.857828][T11525] RIP: 0010:ext4_xattr_inode_update_ref+0x4a6/0x570 [ 836.864453][T11525] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 73 40 44 89 e2 48 c7 c7 20 03 c8 8b e8 7b 78 f0 fe 90 <0f> 0b 90 90 e9 40 fe ff ff e8 0c d3 31 ff 44 0f b6 3d bb 35 0a 0e [ 836.884074][T11525] RSP: 0018:ffffc9001255f430 EFLAGS: 00010282 [ 836.890144][T11525] RAX: 0000000000000000 RBX: ffff88806d3815b8 RCX: ffffc9000d91a000 [ 836.898112][T11525] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 836.906079][T11525] RBP: ffffc9001255f4f0 R08: 0000000000000001 R09: 0000000000000000 [ 836.914111][T11525] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 836.922099][T11525] R13: 1ffff920024abe89 R14: ffff88806d381690 R15: 0000000000000000 [ 836.930095][T11525] ? __warn_printk+0x1a5/0x350 [ 836.934905][T11525] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 836.941281][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.946959][T11525] ? __ext4_journal_ensure_credits+0x25e/0x2f0 [ 836.953137][T11525] ext4_xattr_inode_dec_ref_all+0x52a/0xed0 [ 836.959066][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.964719][T11525] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 836.971172][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.976817][T11525] ? errseq_check+0x4f/0x90 [ 836.981336][T11525] ext4_xattr_delete_inode+0x4ee/0xb80 [ 836.986809][T11525] ? irqentry_exit+0x3b/0x90 [ 836.991430][T11525] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 836.997415][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.003086][T11525] ext4_evict_inode+0x7d6/0x18e0 [ 837.008049][T11525] ? __pfx_ext4_evict_inode+0x10/0x10 [ 837.013441][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.019098][T11525] ? __pfx_ext4_evict_inode+0x10/0x10 [ 837.024611][T11525] evict+0x3e6/0x920 [ 837.028528][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.034180][T11525] ? __pfx_evict+0x10/0x10 [ 837.038626][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.044284][T11525] iput+0x521/0x880 [ 837.048109][T11525] ? __pfx_ext4_drop_inode+0x10/0x10 [ 837.053405][T11525] ext4_orphan_cleanup+0x731/0x11e0 [ 837.058634][T11525] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 837.064288][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.069934][T11525] ? ext4_register_li_request+0xec/0x9b0 [ 837.075598][T11525] ext4_fill_super+0x8a38/0xafa0 [ 837.080584][T11525] ? __pfx_ext4_fill_super+0x10/0x10 [ 837.085884][T11525] ? do_raw_spin_lock+0x12c/0x2b0 [ 837.090917][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.096735][T11525] ? find_held_lock+0x2b/0x80 [ 837.101425][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.107071][T11525] ? set_blocksize+0x406/0x500 [ 837.111854][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.117496][T11525] ? sb_set_blocksize+0x176/0x1d0 [ 837.122532][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.128174][T11525] ? setup_bdev_super+0x369/0x730 [ 837.133223][T11525] get_tree_bdev_flags+0x38c/0x620 [ 837.138358][T11525] ? __pfx_ext4_fill_super+0x10/0x10 [ 837.143667][T11525] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 837.149325][T11525] ? apparmor_capable+0x114/0x1d0 [ 837.154357][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.159999][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.165640][T11525] ? security_capable+0x7e/0x260 [ 837.170588][T11525] vfs_get_tree+0x8e/0x340 [ 837.175025][T11525] path_mount+0x1513/0x2000 [ 837.179546][T11525] ? __pfx_path_mount+0x10/0x10 [ 837.184406][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.190047][T11525] ? kmem_cache_free+0x2d1/0x4d0 [ 837.195003][T11525] ? putname+0x154/0x1a0 [ 837.199261][T11525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 837.204903][T11525] ? putname+0x154/0x1a0 [ 837.209165][T11525] ? __x64_sys_mount+0x28d/0x310 [ 837.214114][T11525] __x64_sys_mount+0x28d/0x310 [ 837.218893][T11525] ? __pfx___x64_sys_mount+0x10/0x10 [ 837.224208][T11525] do_syscall_64+0xcd/0x4e0 [ 837.228717][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.234613][T11525] RIP: 0033:0x7fb2c579034a [ 837.239044][T11525] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.258679][T11525] RSP: 002b:00007fb2c39f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 837.267105][T11525] RAX: ffffffffffffffda RBX: 00007fb2c39f5ef0 RCX: 00007fb2c579034a [ 837.275077][T11525] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb2c39f5eb0 [ 837.283049][T11525] RBP: 0000200000000180 R08: 00007fb2c39f5ef0 R09: 0000000000800700 [ 837.291022][T11525] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 837.299003][T11525] R13: 00007fb2c39f5eb0 R14: 0000000000000473 R15: 0000200000000680 [ 837.307003][T11525] [ 837.310208][T11525] Kernel Offset: disabled [ 837.314523][T11525] Rebooting in 86400 seconds..