last executing test programs: 26m32.782819359s ago: executing program 0 (id=1185): creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 26m32.409438745s ago: executing program 0 (id=1188): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) socketpair(0xf, 0x4, 0x3, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r1, 0x0) 26m30.98996677s ago: executing program 0 (id=1196): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 26m29.337000597s ago: executing program 0 (id=1203): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = dup(r0) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 26m28.219543514s ago: executing program 0 (id=1207): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000032000107fcffffff000090b806000000"], 0x14}}, 0x0) 26m22.570742324s ago: executing program 0 (id=1229): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000300), 0x8400, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x800, 0x70bd25, 0x25dfdbff, {0xa}, [@NDTA_THRESH2={0x8, 0x3, 0x10001}]}, 0x1c}}, 0x20044881) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4, 0x7fffffff, 0x0, 0x1000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000004c0)=0x1, 0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) syz_usb_disconnect(0xffffffffffffffff) shutdown(r0, 0x2) 26m7.354817667s ago: executing program 32 (id=1229): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000300), 0x8400, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x800, 0x70bd25, 0x25dfdbff, {0xa}, [@NDTA_THRESH2={0x8, 0x3, 0x10001}]}, 0x1c}}, 0x20044881) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4, 0x7fffffff, 0x0, 0x1000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000004c0)=0x1, 0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) syz_usb_disconnect(0xffffffffffffffff) shutdown(r0, 0x2) 7m11.096925585s ago: executing program 1 (id=5707): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}], 0x1}], 0x1, 0x0) 7m10.775895431s ago: executing program 1 (id=5711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x1, 0x8, 0xa00, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="47d1241ac7b41e433792db19fb", 0xd}], 0x1}}], 0x1, 0x4880) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 7m9.953437291s ago: executing program 1 (id=5715): syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = semget$private(0x0, 0x207, 0x480) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) semctl$IPC_INFO(r3, 0x4, 0x3, &(0x7f0000000300)=""/26) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)="2e00000004000000000000003772cc9714060200125c000e000a0010000000028000001294c929c48b54a3a5e6e5816c8799e29e079e08ed9029bfb90e4c47149854f4243eeb18318b03db36e821b8d42da5c25fb0a379d43bb6eab9354e99", 0x5f}, {&(0x7f0000001440)="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", 0xe73}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226725d1bdaaf35826dc04373837263fdf17c4f2639c8819e16e17d00fc21f8d7b44977ad781e5d30a73cde14ab215cea85a319e517ffb5f56fa62f8c8d87c91b590c92394f825d1acfb0d6cef6c31388f7e02ff3ef683300187fb8aa78472e41a28bbc8f3d2fd5e10956af04037ecbd9f94f631bc1bd877ab008073a4279d6f2b800"/246, 0xf6}, {&(0x7f0000000200)="57247d533633c256b37c6a4aedc53a12d585f860d01b94c14c8d", 0x1a}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279d99bb839a1", 0x2d}, {&(0x7f0000000880)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd20ea3bb4bda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m8.785042129s ago: executing program 1 (id=5721): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'ghash\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7m6.993128699s ago: executing program 1 (id=5731): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x9}, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f10000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_INTERRUPT(r8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000008c0)={0xc0}) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='h'], 0x1, 0x14d1, &(0x7f00000015c0)="$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") 7m5.815132693s ago: executing program 1 (id=5739): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68060200) 6m49.934209294s ago: executing program 33 (id=5739): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68060200) 2m25.6130686s ago: executing program 7 (id=6845): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 2m24.694899549s ago: executing program 7 (id=6850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006774700014000280080001"], 0x48}}, 0x810) 2m24.350614141s ago: executing program 7 (id=6853): r0 = syz_open_dev$ndb(0x0, 0x0, 0x80900) r1 = socket(0x2, 0x1, 0x100) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2m21.319547435s ago: executing program 7 (id=6865): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x0, @loopback, 0x1}, {0xa, 0x4e20, 0x2, @mcast2, 0xa865}, 0xffffffffffffffff, {[0x1, 0xfffffff7, 0xe8c, 0x4, 0x7, 0x1, 0x5, 0x2]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a01040000000000000000020000040900010073"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24004800) 2m19.172079527s ago: executing program 7 (id=6873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x0, 0x22, &(0x7f0000001180)=[{}, {}], 0x10, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0xac, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x2, 0x26, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x6}, @call={0x85, 0x0, 0x0, 0x75}, @jmp={0x5, 0x0, 0xc, 0xa, 0x3, 0xffffffffffffffe0, 0x1}, @generic={0x1, 0x0, 0xe, 0x8, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe1d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000f00)='GPL\x00', 0x0, 0xb3, &(0x7f0000000f40)=""/179, 0x41100, 0xa, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x1, 0xb, 0x2, 0x6}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f0000001a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m16.303275461s ago: executing program 7 (id=6880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x1, 0x8, 0xa00, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r7, 0x0, 0x0, 0x4880) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2m15.802542236s ago: executing program 34 (id=6880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x1, 0x8, 0xa00, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r7, 0x0, 0x0, 0x4880) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 14.37678477s ago: executing program 6 (id=7349): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200808, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES8=r5, @ANYRES64=r1, @ANYRES32=r0, @ANYRES64=r4, @ANYRES16], 0x0, 0x1e6, &(0x7f00000005c0)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x523, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000007c0)="b900ff0100000000000008f086dd1f14e9a595d2b7c9f6dcdc572f600fc6283b52c633689379e9c25be008269cf3cb060a2f324ee202", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x6, 0x7fff}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r12, 0x7, 0x10}, 0xc) r13 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x5}, 0x8) pwritev2(r13, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x100000}], 0x2, 0x1400, 0x0, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r13}, 0x20) 14.257232617s ago: executing program 2 (id=7351): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x549, &(0x7f0000002d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x20400, 0x20) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 13.782098021s ago: executing program 2 (id=7353): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) r4 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@nogrpid}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$eJzs3c9rHGUfAPDvbJOmb9vXpODBimCgBwulG5vWUkGkogcpVop689Bud7ehZLdbspvShIpWFMGTSPHsj5M3/wFRBL15FDx7kkKRUi+CsDLb2bjt7jabNJtV9/OBCc8zM5tnvjszz/Mkz8NMAGNrNv2Ri9gfER8lEdPZ+iQiJlupiYiTd/e7c/taMV2SaDZf/y1p7ZPmo+MzqT1Z5rGI+O79iEO57nLrK6uLhUqlvJTl5xrVy3P1ldXDF6uFhfJC+dL88WePzp+Yf+bE/JbF+sd7r54/9dVLX9x498dfXnvr1JNJnIy92bbOOLbKbMxm38lk+hXe48WtLmzEklEfAJuS3po77t7lsT+mY0crBQD8l70dEU0AYMwk2n8AGDPt/wO0x/aGMQ72T3brhYjY1Sv+iWzMbldrHHT3neSekZEkIma2oPzZiLj65gdfp0sMaRwSoJd3rkfEuZnZ7vov6ZqzsFFPD7DP7H159R9sn2/T/s+JXv2f3Fr/J3r0f6Z63Lubsf79n7u5BcX0lfb/nuvZ/12btDazI8v9v9Xnm0wuXKyU07rtkYg4GJNTaf7IA8o49vHzP/Tb1tn/S5e0/HZfMDuOmxNT936mVGgUHibmTreuRzw+0Sv+ZO38J336v2cGLKPx/ROf99u2fvzD1fws4qme5//vGW1Jx/zEqeianzjXuh7m2ldFt/yH0/v6lT/q+NPzv/vB8c8knfM16xsv46dP/ny537bNXv87kzda6Z3ZuquFRmPpSMTO5JXu9R1TSNv59v5p/AcPPLj+63X9p38Tnhsw/sVPvzy/+fiHK42/tKHzv/HEgZ+/6R1PM5ttvO75P9ZKHczWDFL/DXqAD/PdAQAAAAAAAAAAAAAAAAAAAAAAAMCgchGxN5Jcfi2dy+Xzd9/h/WjszlVq9cahC7XlS6VovSt7JiZz7SddTnc8D/VI9jz8dn7+vvzRiNgXETem/tfK54u1SmnUwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZk+f9/+nfp0a9dEBAEOza9QHAABsO+0/AIwf7T8AjB/tPwCMH+0/AIwf7T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDdub06XRp/n77WjHNl66sLC/WrhwuleuL+epyMV+sLV3OL9RqC5Vyvlirrvf7KrXa5fnjsXx1rlGuN+bqK6tnq7XlS42zF6uFhfLZ8uS2RAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1NfWV0sVCrlJQkJCYm1xKhrJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/h78CAAD//6LRHug=") close_range(r4, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(r5, 0xfffffffffffffe8b, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x0, 0xf01, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x20000004) 12.757969338s ago: executing program 6 (id=7354): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) 12.164590194s ago: executing program 8 (id=7357): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x24b) write$uinput_user_dev(r0, &(0x7f00000021c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x8, 0x4, 0xb, 0x2}, {0x8000, 0x3, 0x0, 0x6}, {0xb, 0x8, 0x6, 0xfffffe00}, {0xb, 0x3, 0x5}]}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000012c0)=""/4074, 0xfffffffffffffdf8) 9.565035955s ago: executing program 2 (id=7360): socket(0x10, 0x3, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.430398668s ago: executing program 8 (id=7361): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x101, 0x3, {{0xd, 0x4, 0x2, 0x2, 0x34, 0x64, 0x0, 0xfb, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0x3, [{@private=0xa010100, 0x4}, {@loopback, 0x401}, {@broadcast, 0xfffffff6}]}, @timestamp_addr={0x44, 0x4, 0x2a, 0x1, 0xc}]}}}}}) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x0, 0x3fe) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000006300)={0x0, 0x0, &(0x7f00000062c0)={&(0x7f0000006280)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e22}}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001b00)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)="8be493d495e3f1e36e43f48c6c264b3375cfd1d7fbcdc5367d3f0fde9bce30ca34729d98368691e42215fa4f0419addb15de55c3e2d5d490bdcff3ca16a3b9166b593cb8668dea40268c66bb8e49d9660eee3faf5ac5dbf591757c0c9455668a4af8ec60bb9d7358d4263556dcbff913", 0x70}, {&(0x7f0000000340)="f664b8b25d3508e5ba1a2bddca7fc41397252188ef64b71218f72d3da5e9e05b6c827566687d77e263868ffd541f3fca3d50f7f7cad78501c4b3a7d935b769b9dfe0d14f4e3d5092f995d897650e6c109347f26bbcddd6c37d2f14c447ea521db3761fa37c76ed6ad77325b91371d823033e69199c27a075cb0c73e00f3daff4d8af8770a3d5fa510288f027b4417b13c487e05b232ff36e0ae4f72496ae595503c56ac9241e77120c43", 0xaa}, {&(0x7f0000000480)="f302abc92bb41a53616f23c20bc7fe1c750009b8b111a0646ceaa571e2b5b6728ebe7892ce594dc08cb8e198e2b249808ad2570019308a5948f0045e394e13db43957e551842fbb5e1b71c6263f79e864b11b252b35a507b73dceb151424a18175684a172e54db110db694a2a31a4a9e878ce930795485b707cc557737a3d489491f19074efb0b6e9ed4022f009b620e2bfd86d49b5df9f466fe5f27b82bac542d0aa69ec05b415646f2626d92f91ca1fed6e399e8730de087e6", 0xba}], 0x3, &(0x7f0000000bc0)=[@rights={{0x24, 0x1, 0x1, [r4, r5, r1, r1, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r10, r2, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r10, r4, r5, r10, r5, r4, r4, r10, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r8, r3, r4, r9, r2]}}, @rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r9, r1, r9, 0xffffffffffffffff]}}], 0x168, 0x4000}}, {{&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000b40)="1f5ecbb7901bf295e0995ab84fe598b4b1d094dfe11e7cb75aa8", 0x1a}, {&(0x7f0000000dc0)="853a415a18892db85f8257bcf13d44127c7988c494a8a4ae27c0352943fffe70c97b1b936071575201553d37bcbb289311d31e3dd6da8236faf40953d8e44f9ea50f125cfa013d941ff57d1e6e47ee5f2bfb4bfdf9fca84ca9ca25bfdd060200db8f08bbc16a01b2e63a7e577da2a88b7074bbff7acb0d5a8d15d9d05c4bf87a40743c094701dea44c60ed4b5b3c025b8208477b70867f8e671febe12be7bfb71a3b9e40732f304d6d92818a6475d312eed4495762e505b0a4f2569122e2dacd016093815476604d83d450c22c7a8f2338cf", 0xd2}, {&(0x7f0000000ec0)="375fc9a05cdf9b06153d2cd0f3e6fa9d21b654d6c18870b98ace736430d33e9b52eaefc851b9874855db2d0f4daf3ae2dbc6324611afb11997fee8eba41463b37e21e82323c0b036727c61de4e18d2ca928c7216c06b862dfc8a231a40b747", 0x5f}, {&(0x7f0000001640)="fdc06762e2a55f7c03f370073edb8607758d5c1c0b959a9f6c43f469bcd8b22b8517dbbae7695df2e1c43c5a08131a7014e57ddf6f7a06c2d7321bc164a1c3da6398d55493078f6040260e3b2bc8c8b2e73d89e222f62f3a97b53821f4345db8487224caf36805cd66bf5773030138b701df5643857c6104b41ab05377", 0x7d}, {&(0x7f00000016c0)="cbf967c6dd80b467c1aaa48e08e88bece43133c70c217b66696a77f77dfb3a230ba79e7c736908d839e44939a5b5bce38a763f99e937adb23decbb4bc529485c241eb5f695a5baa3af7367a063960cbe20ac6ed71a5687e6e6b5df589f6d8fc760e60a0db4fb0227ff7f5fe2744be407cba87de5a791749cea229abebb8f5af00c9ca3060f2adc4a20ee345f161384a598f05647fb3c5eaf619ba821d8d2bb6726f244b7c4", 0xa5}, {&(0x7f0000001780)="25a6844e8145066b8a086e98ac25ae706e5a4d00efb1b7c998d41aa6236f79778c534dae21d6f915dcb9d50d114e2f227213454b12054afeacdc47ddbb0645cee0a6c7951bf672f1d83eef42393a5664f8620a556d00aa8561cb0515208b7e62e044226b14e2a37a8b0578bf", 0x6c}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r12}}}], 0x78, 0x4000810}}], 0x2, 0x20000080) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010000, &(0x7f0000000540)=ANY=[@ANYBLOB='nobarrier,umask=0000000000000,nls=koi8-u,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c747970653d3d7a9b832c756d61736b3d30303030303030303030303030303030303030303132362c0002b9cf0a9ea317306e3a77da"], 0x1, 0x6e6, &(0x7f0000000f40)="$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") 7.710433783s ago: executing program 8 (id=7366): syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = semget$private(0x0, 0x207, 0x480) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) semctl$IPC_INFO(r3, 0x4, 0x3, &(0x7f0000000300)=""/26) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.589112743s ago: executing program 6 (id=7367): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8425, 0x100, 0x0, 0x8f}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r0, 0x47ba, 0xd0, 0x0, 0x0, 0x0) 6.560829727s ago: executing program 6 (id=7369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000010405060000000000000000070000040500010003000000b1d75ce5b343ace6bc8ceca8ae0138c51b3f52f25229508b9386daa171b19a8c01a654164762724c163341b01b4df7e1e9cadf350e207dca432d8f6cf462c5407fe905c4769ba177800854e72f77bc07833e5c0d5fee38718c07c9e98be25d83a3de23f6d5a98bb65a001f6029ebdc1169d0f63f9bf7cd80e3ed4d21c4ac4da50927b58bcfff2c054b4d42b875"], 0x1c}}, 0x2008804) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x24, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}]}, @NFT_MSG_DELSETELEM={0x2c8, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2b4, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe63e}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7cf1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xfa, 0x6, 0x1, 0x0, "495a336ea157481e2a2e610673b09c3bdd94b74f48b3d20a75c05642eefea2429bdd6961c115ca7af5ebd02ecbe8c16a240a647a3d61c7fee812b0eef5a0555ba4780c2ff243e7226c9bb8ac2b42d7740c78b11c2a6199bb53936b2c13472ef06e248f4ca09b8f0d3fdbfcf3a7144d1c66983d6d07667b97baf22a5c15e4ee6bd3abc39bc8caef04e6187b92f3eb5bb9da3474b559bec037a53a6feb2908fdb272495040c9bafaf2c5e2eb34c77bb55d3aa167277e68015363a0be4a3d31ef48b6d7e902e9a865c6ed2474e52eed4545e7b3cb85158aa6f355a2531393103928aeff12e185b6e867a114f566290d12df811adbc7e6e8"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xce4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2042}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}]}]}, @NFT_MSG_DELOBJ={0xac, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x3c, 0x8, "72d0e2768d0e1d2e5b15d4b8ab75acb734debb74eb0c4ed3211fa2ebe4d75ade1e2929f6e02364766cb61c485bdd0cf908e6a794be16756c"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3e8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0xc412, &(0x7f00000000c0), 0x1, 0x4fe, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x5b48670f7c8a1a45, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x327b, 0x220002) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.554574733s ago: executing program 8 (id=7370): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x101, 0x3, {{0xd, 0x4, 0x2, 0x2, 0x34, 0x64, 0x0, 0xfb, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0x3, [{@remote, 0x2}, {@private=0xa010100, 0x4}, {@broadcast, 0xfffffff6}]}, @timestamp_addr={0x44, 0x4, 0x2a, 0x1, 0xc}]}}}}}) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x0, 0x3fe) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.260021259s ago: executing program 5 (id=7373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x0, 0xfff7}}}}}, 0x0) (async, rerun: 64) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) (rerun: 64) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) (async, rerun: 64) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async, rerun: 64) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x648, &(0x7f0000000ec0)="$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") listen(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0x34}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xec, r6, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0xef868cd73f7f42b1}, 0x4000050) (async) truncate(&(0x7f0000000000)='./file2\x00', 0xfe0) 5.816963544s ago: executing program 4 (id=7374): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x330, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x31c, 0x1, [@m_skbmod={0xa8, 0x1f, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x10001, 0x5, 0x1, 0x8a}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x158, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x129, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0xdc, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x20000000, 0x3, 0x7}, @local, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffffff, 0xffffffffffffffff, 0x9, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x3, 0xa2d5, 0x1}, @rand_addr=0x64010100, @private=0xa010102, 0xff000000, 0x1}}]}, {0x39, 0x6, "507e1baf70350ba63c9fdba3ace3ff69773db861d8a2e332d6b16db257bc0277a998c2a2037a7e3928486948fe0d47d2df6a88cb91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x3c, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "63ddc58aeeea76aadf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x330}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.587027533s ago: executing program 4 (id=7375): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYRES32=r1], 0x5c}}, 0x0) 5.485947042s ago: executing program 5 (id=7376): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x3e9, 0x200, 0x70bd25, 0x25dfdbfd, {0x10, 0x1, 0x2, r2, 0x5, 0x7, 0x2, 0x3, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008044}, 0x24040004) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000380)={[{@inode32}]}) prlimit64(r2, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000300)={[{@noblock_validity}, {@orlov}, {@nobh}, {@minixdf}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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") 5.106814735s ago: executing program 4 (id=7377): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04910c20"], 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') dup3(r2, r1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000040)={0x5411, 0xb, [{0xd, 0x1}, {0x3}, {0x2, 0x1}, {0xd, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0xe, 0x1}, {0xb, 0x1}, {0xf, 0x1}, {0x7, 0x1}, {0x1, 0x1}]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xc7, 0x0, 0x3, {0x3, @win={{0x8076, 0x2, 0x7, 0x9}, 0x6, 0x0, 0x0, 0x2, 0x0, 0x9}}, 0xfffffffe}) 5.106052071s ago: executing program 5 (id=7378): ioperm(0x6, 0x3, 0xb017) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x6, 0x2, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x37]}}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d650e8b089b3f360768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07450936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xfffffffffffffd6a}}, 0x1006) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.995285946s ago: executing program 6 (id=7379): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_skbmod={0x9c, 0x1f, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x10001, 0x5, 0x1, 0x8a}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x158, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x129, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0xb4, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x20000000, 0x3, 0x7}, @local, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x3, 0xa2d5, 0x1}, @rand_addr=0x64010100, @private=0xa010102, 0xff000000, 0x1}}]}, {0x39, 0x6, "507e1baf70350ba63c9fdba3ace3ff69773db861d8a2e332d6b16db257bc0277a998c2a2037a7e3928486948fe0d47d2df6a88cb91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x4c, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x1d, 0x6, "63ddc58aeeea76aadf42158ae681bee82d74147297a5c67a53"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x30c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.992768545s ago: executing program 5 (id=7380): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) 4.714152634s ago: executing program 6 (id=7381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffcd4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x65, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map, 0x35, 0x0, 0xa315, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.694574901s ago: executing program 3 (id=7382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c002b800000030000000000080003000000000008000800", @ANYRES32, @ANYBLOB="4c001a80100002800c00019808000f0000000000380002802600"], 0x88}}, 0x0) 4.581018913s ago: executing program 4 (id=7383): syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = semget$private(0x0, 0x207, 0x480) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) semctl$IPC_INFO(r3, 0x4, 0x3, &(0x7f0000000300)=""/26) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.877315464s ago: executing program 3 (id=7384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x5000000, 0x0, 0x0, 0x0) 3.403655462s ago: executing program 4 (id=7385): ioperm(0x6, 0x3, 0xb017) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x6, 0x2, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x37]}}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d650e8b089b3f360768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07450936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xfffffffffffffd6a}}, 0x1006) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.048994972s ago: executing program 4 (id=7386): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x5d4b, &(0x7f000000bac0)="$eJzs3U1vHVcZB/Dnvvj6pbSNKlSFiEWaQmkpzXsC5a0pCxawAAllTSLXrQIpoMQgWlnElReIFV8BNt2w6FfgA/QzID4AkWxWXVAGjX1OMh5f5zokvnPt8/tJzswz547vmfw9nns9M/cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/+uHPLvQi4sbv0oITEV+IQUQ/YrGuT0c9cy0/fhgRJ2O7OV6MiMF8RL3+9j/PR1yOiE+fi9jcWluuF188YD+unF+98/mPf/CPP/554+Qv3vn5x+32n37x0id/uhdx4idvfvL5vaez7QAAAFCKqqqqXnqbfyq9v+933SkAYCry8b9K8nK1Wq1Wq9XHr26qxrvXLCJivblO/ZrB6XgAOGLW47Ouu0CH5F+0YUQ803UngJnW67oDHIrNrbXlXsq31zwenN5pz9eC7Mp/vffg/o79ppO0rzGZ1s/XRgzihX36szilPsySnH+/nf+NnfZRetxh5z8t++U/2rn1qTg5/0E7/5bjk39/bP6lyvkPHyv/gfwBAAAAAGCG5b//n+j4/O/8k2/KgTzq/O/pKfUBAAAAAAAAAJ62Jx3/7wHj/wEAAMDMqt+r1/7y3MNl+30WW738ei/i2dbjgcKkm2WWuu4HAAAAAAAAAAAAAJRkuHMN7/VexFxEPLu0VFVV/dXUrh/Xk65/1JW+/VCyrn/JAwDAjk+fa93L34tYiIjr6bP+5paWlqpqYXGpWqoW5/Pr2dH8QrXYeF+bp/Wy+dEBXhAPR1X9zRYa6zVNer88qb39/ernGlWDA3RsOjoMHAAiYudotOmIdMxU1fPR9ascjgb7//Fj/+cguv45BQAAAA5fVVVVL32c96l0zr/fdacAgKnIx//2eQG1Wq1Wq9XHr26qxrvXLCJivblO/ZrBcPwAcMSsx2ddd4EOyb9ow4g42XUngJnW67oDHIrNrbXlXsq31zwepPHd87Ugu/Jf722vl9cfN52kfY3JtH6+NmIQL+zTnxen1IdZkvPvt/O/sdM+So877PynZb/86+080UF/upbzH7Tzbzk++ffH5l+qnP/wsfIfyB8AAAAAAGZY/vv/Ced/8yYDAAAAAAAAwJGzubW2nO97zef/vzzmce7/PJ5y/j35Fynn32/n37ogZ9CYv//2w/z/vbW2/PHqv76UpzOf/9xgVD/3XK8/GKZrfqq5d+NW3I6VOL/n8cNd7Rf2tM/tar84of3SnvZR3b6Y28/Gcvw6bsc7D9rnJ1wYtTChvZrQnvMf2P+LlPMfNr7q/JdSe681rd3/qL9nv29Oxz3Ptb/955W9e9f0bcTgwbY11dt3poP+bP+fPDOK395duXP29zdXV+9ciDTZtfRipMlTlvOfS185/1df3mnPv/eb++v9j0aPnf+s2Ijhvvm/3Jivt/e1KfetCzn/UfrK+ecj0Pj9/yjnv//+/3oH/QEAAAAAAAAAAAAAAIBHqapq+xbRaxFxNd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49f3VSN91aziIi/N9epXzP8Ydw3AwBm2X8j4p9dd4LOyL9g+fP+6ulXuu4MMFV3P/jwlzdv3165c7frngAAAAAAAAAA/688/ufpxvjP29cBtcaN3jX+69tx+siO/9kfDbbHOk8b9FI8evzvM/Ho8b+HE55vbkL7aEL7/IT2hQntY2/0aMj5v5QyzvmfShtW0vivr3bQn67l/M+ksZ5z/l9rPa6Zf/XXo5x/f1f+51bf/825ux98+Mat92++t/Leyq8unL96+dKVy5euXDn37q3bK+d3/u2wx4cr55/HvnYdaFly/jlz+Zcl5//VVMu/LDn/V1It/7Lk/PPrPfmXJeef3/vIvyw5/9dSLf+y5Py/nmr5lyXn/3qq5V+WnP83Ui3/suT830i1/MuS8z+bavmXJed/LtXyL0vOP5/hkn9Zcv75ygb5lyXnfzHV8i9Lzv9SquVflpz/5VTLvyw5/yupln9Zcv5XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVTLvyw5/++mWv5lyfl/L9XyL0vO//upln9Zcv5vpVr+ZXn4+f9mzJgxk2e6/s0EAAAAAAAAAAAAALRN43LirrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cXI1d5nwH87Je9NiS4gRBCHLDNl4GF3fUXOMRgkpBS0g9KQtq0pMax18aJv+pd8yVUNoW2REEqUntBL5omURpFaitQFampRCOkRmrvmqtG3EStlAtfQOWgpFKqwFZn5n1fz8zuzlljj5k57+8X2X/vzDkz75w5M7vPRs8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Grjx2f+bKgoivJP4691RXFx+e81xe7yy/kd7/YKAQAAgHP1VuPvv78kXbB7BTu1bPNvV/3HdxcWFhaKL7x56u2/WFhIV2woipHVRdG4Lvr3X/x8oXWb4JlifGi45evhirsfqbh+tOL6sYrrV1Vcv7ri+vGK6xcdgEXWNH8f07ixaxv/XNc8pMVlxVjjumuX2OuZodXDw/F3OQ1DjX0Wxg4Uh4rDxUwxtWifocb/iuKVjeV93VvE+xpuua/1RVGc/ulT++IahsIxvrZou7OG1ufujbuLDW/+9Kl93557/YNLzcrDsGilRbF5U7nOZ4vizK+riqFidTomcZ3DLetcv8Q6R9rWOdTYr/x35zpPr3Cd8XGPh3X+sMs614fLHr+mKIr5YtltOj1TDBdrO+41He/x5hlR3kb5VL6vGD2r82TjCs6Tcp+fXNN+nnSek/H4bwzHZHSZNbQ+HW98edWi4/5Oz5PyUffDuVre9v3lnY6Pt/5qte1cLbd56rrlz4Eln7slzoF0LrecA5uqzoHhVSONc2D4zJo3tZ0D04v2GS6GGvd16rru58Dk3JHjk7NPPHnLoSN7D84cnDk6PbVj29bt27Zu3z554NDhmanm32d3SAfI2mI4nYObwntNPAdv6Ni29ZRc+Mb5ex2M98nroHzsn7m+XNDFw8Uy53i5zbObz/11kL7vt7wORlteB0u+py7xOhhdweug3Ob05pV9zxxt+bPUGnr1Xriu5Rx4N78flvf50I3LvxeuD+t67qaz/X44sugciA9rKLz2ykvSz3vjt4fjsvi8uLK84qJVxcnZmRO3Pr53bu7EdBHGBXFpy3PVeb6sbXlMxaLzZfisz5fdf/fL669c4vJ14ViN39z9uSq32TbR/blqvLsvfTzbLt1ShHGeXejjudR3s/J4pizR5XiW2zx7y7n/LJhyScv731jV+9/I2Gjz/W8kHY2xtve/xU/NSGNlRXH6lpW9/42FPxf6/e+yPnn/K4/VQ7d2PwfKbZ6bPNtzYLTr+981YQ6F9dwYEsN4S+5/u3H9fPM0bXkuK8+b0dGxcN6MxntsP2+2LtqnvLXyvjdPvbPzZvM17c9V288tNTxvymP1l1Pdz5tym1enz/29Y038Z8t7x6qqc2BsZFW53rF0EjTf7xbWxHPg1mJfcaw4XOxP+5TPcnlfE1tWdg6sCn8u9HvHFX1yDpTH6sUt3c+BcpsfbD2/PzttDpekbVp+dur8/cJymf/K0TO313nYznfmL9f5iW3dfzdUbvP6trPNGd2P083hkouWOE6dr5/lzun9xYU5TleEdR7e3v13U+U2l+1Y4fm0uyiK16Zfa/y+K/x+9x9P/ud3237vu9TvlF+bfu2+yQd+dDbrBwDgnXu78ff8qubPmi3/j/VK/v9/AAAAYCDE3D8cZiL/AwAAQG3E3D8SZiL/AwAAQG3E3D8aZpJJ/n/k9p0vvfV0kT4NcCGI18fDcP+dze1ix3s+fL1h4Yzy8o99a+ylrzy9svseLoril/d9aMntH7kzrqvpeFznR9ovX+SKq1d0/w8/eGa71s9POL2zefvx8az0NIhd5VcmtzRud8MT04356n1FYz4w/9wzzdtvfh23P7W1uf1fhw8t2X1gqG3/zWE914a5IXymzP27zxyHcsb9Xlp/1b9e+tkz9xf3G9r03sbDfPGPmrcbPyPqhUub28fHvdz6/+Wr33mp3P7x65Ze/9PDS6//VLjdn4T5i13N7VuP+Vda1v8nYf3x/uJ+t37z+0uu/+UPNLd/OZwXXw+zc/13//mH31rq+Yr3s/uO5n7x/qf+d1tjv3h78fY71z/+9HTb8ei8/VffbN7Orkd/NtK6fbw83k/08B3t5/dQeH7beuRFUXznT4u241x8tLnfP3esP97e8TuWXv/NHes8PnR1Y/8zj2dd2+P62t9uWfLxxvXs/od1bY/nhXvC8Xtz8gfl7Z56IJyP4fr/+2Hz9jo/y/Tle9rfb+L2X1/XfN3G25vsWP8LHeufv7o8dtXrv/fN5vpfvmt12/p3fzKcT/c2Z9X6D/7NJW37f+PbzefjxGMTR4/Nnjy0v+Wotr6OV4+vWXvRxe957yXhvbTz6z3H5h6ZObFhasNUUWwYwI8M7PX6vxnm/zTH/Pm/h6Yf/ax53j3/qeb3rRt+3vz6hXD5w+H5jN8fv/ZXY23na+fzPn9Xc57r+m8K61ipD3z1v69e0YanPv/KyX/649c7fy6Ij+f4+8cbj+/FjZc3rht6tXl95/tVlf96f/vr+sejU435vXBcF8InM2+6vHl/nbcfP5vk+U83X7/xJ7m4f9HxeSLrRtofx7mu/8fh55jvX9H+/hfPj+893fFpzuuKoXIJ8+H9oZhvXh+3isf7+dOXL3l/8XN4ivkPns0ylzX7xOzk4UNHTz4+OTczOzc5+8STe44cO3l0bk/js0v3fLFq/zOv77WN1/f+mR3bisar/Vhz9Ni7vf7jD+7bf9vU9ftnDuw9eWDuweMzJw7um53dN7N/9vq9Bw7MPFa1/6H9u6a37Nx625aJg4f277p9586tOycOHT1WLqO5qAo7pr40cfTEnsYus7u27Zzevn3b1MSRY/tndt02NTVxsmr/xvemiXLvRydOzBzeO3foyMzE7KEnZ3ZN79yxY0vlpz8eOX5gdsPkiZNHJ0/OzpyYbD6WDXONi8vvfVX7k4fZY+H9rsNQ+On8czfvSJ+PW/rWl5e9qeYm7T+eFm+Ez4KK39+qvo65fyzMJJP8DwAAADmIuT988P+ZK+R/AAAAqI2Y+1eHmcj/AAAAUBsx94+HmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc/+aosgy/wMAAEAOYu5fG2Yi/wMAAEBtxNx/UZiJ/A8AAAC1EXP/xWEmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fc/54wk0zyPwAAAOQg5v73hpnI/wAAAFAbMfdfEmYi/wMAAEBtxNy/Lswkk/yv/6//r/+v/6//r//fS/r/+v/d6P/r/w/y+vX/9f+p1m/9/5j7fyXMJJP8DwAAADmIuf99YSbyPwAAANRGzP2XhpnI/wAAAFAbMfdfFmaSSf7X/9f/1//X/9f/1//vJf1//f9u9P/1/wd5/fr/+v9U67f+f8z97w8zyST/AwAAQA5i7r88zET+BwAAgNqIuf8DYSbyPwAAANRGzP1XhJlkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/wu3/ovO+/r1//X/qdZv/f+Y+z8YZpJJ/gcAAIAcxNx/ZZiJ/A8AAAC1EXP/h8JM5H8AAACojZj714eZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z/4fDTDLJ/wAAAJCDmPuvCjOR/wEAAKA2Yu6/OsxE/gcAAIDaiLl/Q5hJJvlf/1//X/9f/1//X/+/l/T/9f+70f/X/x/k9ev/6/9Trd/6/zH3bwwzyST/AwAAQA5i7h8NM5H/AQAAoDY2Nf4eL64JM5H/AQAAoDZi7r82zCST/K//r/+v/6//r/+v/99L+v/6/93o/+v/D/L69f/1/6nWb/3/mPuvCzPJJP8DAABADmLuvz7MRP4HAACA2oi5/4YwE/kfAAAAaiPm/s1hJpnkf/1//X/9f/1//X/9/17S/9f/70b/X/9/kNev/6//T7V+6//H3H9jmEkm+R8AAAByEHP/TWEm8j8AAADURsz9N4eZyP8AAABQGzH3T4SZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z/y1hJpnkfwAAAMhBzP23hpnI/wAAAFAbMfdPhpnI/wAAAFAbMfdPhZlkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/dJhJJvkfAAAAchBz/5YwE/kfAAAAaiPm/q1hJvI/AAAA1EbM/dvCTDLJ//r/+v/6/z3u/6/S/9f/1//X/9f/X47+v/7/IK9f/1//n2r91v+PuX97mEkm+R8AAAByEHP/jjAT+R8AAABqI+b+28JM5H8AAACojZj7bw8zyST/6//r/+v/++//6//r//eS/r/+fzf6//r/g7x+/X/9f6r1W/8/5v6dYSaZ5H8AAADIQcz9Hwkzkf8BAACgNmLuvyPMRP4HAACA2oi5/6NhJpnkf/1//X/9f/1//X/9/17S/9f/70b/X/9/kNev/6//T7V+6//H3L8rzCST/A8AAAA5iLn/zjAT+R8AAABqI+b+u8JM5H8AAACojZj7d4eZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z/91hJpnkfwAAAMhBzP0fCzOR/wEAAKA2Yu7/eJiJ/A8AAAC1EXP/J8JMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/54wk0zyPwAAAOQg5v5PhpnI/wAAAFAbMff/apiJ/A8AAAC1EXP/vWEmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fc/2thJpnkfwAAAMhBzP33hZnI/wAAAFAbMfd/KsxE/gcAAIDaiLn/18NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/zfCTDLJ/wAAAJCDmPt/M8xE/gcAAIDaiLn/t8JM5H8AAACojZj77w8zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/t8OM8kk/wMAAEAOYu5/IMxE/gcAAIDaiLn/02Em8j8AAADURsz9nwkzyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/ql3w/n+8oWX6/zH3Pxhmkkn+BwAAgBzE3P/ZMBP5HwAAAGoj5v7fCTOR/wEAAKA2Yu7/3TCTTPK//r/+v/6//r/+v/5/L+n/6/93o/+v/z/I69f/1/+nWr/99/9j7v9cmEkm+R8AAAByEHP/74WZyP8AAABQGzH3/36YifwPAAAAtRFz/0NhJpnkf/1//X/9f/1//X/9/17S/9f/70b/X/9/kNev/6//T7V+6//H3P/5MJNM8j8AAADkIOb+Pwgzkf8BAACgNmLu3xNmIv8DAABAbcTc/3CYSSb5X/9f/1//X/9f/1//v5f0//X/u9H/1/8f5PXr/+v/U63f+v8x9+8NM8kk/wMAAEAOYu7/QpiJ/A8AAAC1EXP/vjAT+R8AAABqI+b+/WEmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fcPxNmkkn+BwAAgBzE3H8gzET+BwAAgNqIuf9gmIn8DwAAALURc/8jYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9x/KMwkk/wPAAAAOYi5/4thJvI/AAAA1EbM/V8KM5H/AQAAoDZi7j8cZpJJ/tf/1//X/9f/1//X/+8l/X/9/27Osv9f3rj+f6H/3y/r1//X/6dav/X/Y+4/EmaSSf4HAACAHMTcfzTMRP4HAACA2oi5/1iYifwPAAAAtRFz//Ewk0zyv/6//r/+v/6//r/+fy/p/+v/d+O//6//P8jr1//X/6dav/X/Y+7/wzCTTPI/AAAA5CDm/hNhJvI/AAAA1EbM/bNhJvI/AAAA1EbM/XNhJpnkf/1//X/9f/1//X/9/17S/9f/70b/X/9/kNev/6//T7V+6//H3H8yzCST/A8AAAA5iLn/0TAT+R8AAABqI+b+x8JM5H8AAACojZj7Hw8zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/ifCTDLJ/wAAAJCDmPufDDOR/wGA/2fvrnn9uY44Dt/S7yovzOE4zMwOg8PoxGFmdpiZmamIlMxMESl7Ikur/56Z52lGP+kWp7jNt/hoAYA2cvffHrfY/wAAANBG7v77xy1D9r/+X/+v/9f/6//1/2fS/+v/j+j/9f87v1//r/9n7Wr9f+7+B8QtQ/Y/AAAATJC7/4Fxi/0PAAAAbeTuf1DcYv8DAABAG7n7Hxy3DNn/+n/9v/5f/6//1/+fSf+v/z+i/9f/7/x+/b/+n7Wr9f+5+x8StwzZ/wAAADBB7v6Hxi32PwAAALSRu/9hcYv9DwAAAG3k7r8jbhmy//X/+n/9v/5f/6//P5P+X/9/RP+v/9/5/fp//T9rV+v/c/c/PG4Zsv8BAABggtz9j4hb7H8AAABoI3f/I+MW+x8AAADayN3/qLhlyP7X/+v/9f/6f/2//v9M+n/9/xH9v/5/5/fr//X/rF2t/8/d/+i4Zcj+BwAAgAly9z8mbrH/AQAAoI3c/Y+NW+x/AAAAaCN3/+PiliH7X/+v/9f/6//1//r/M+n/9f9H9P/6/53fr//X/7N2tf4/d//j45Yh+x8AAAAmyN3/hLjF/gcAAIA2cvc/MW6x/wEAAKCN3P1PiluG7H/9v/5f/6//1//r/8+k/9f/H9H/6/93fr/+X//P2tX6/9z9T45bhux/AAAAmCB3/1PiFvsfAAAA2sjd/9S4xf4HAACANnL3Py1uGbL/9f/6f/3/uv+/7Ub/f6P/1//fR/p//f8R/b/+f+f36//1/6xdrf/P3f/0uGXI/gcAAIAJcvc/I26x/wEAAKCN3P3PjFvsfwAAAGgjd/+z4pYh+1//r//X//v+v/5f/38m/b/+/4j+X/+/8/v1//p/1q7W/+fuf3bcMmT/AwAAwAS5+58Tt9j/AAAA0Ebu/ufGLfY/AAAAtJG7/3lxy5D9r//X/+v/9f/6/8v2//fE/7r+/4D+X/9/o/+/z251P7/7+/X/+n/Wrtb/5+5/ftwyZP8DAADABLn774xb7H8AAABo486bmzvuvuv2mxf8+5f9DwAAAB3l7n9h3DJk/+v/9f/6f/2//v+y/b/v//8f9P/6/xv9/312q/v53d+v/9f/s3a1/j93/4viliH7HwAAACbI3f/iuMX+BwAAgDZy978kbrH/AQAAoI3c/S+NW4bsf/2//l//r//X/+v/z6T/1/8f0f/r/3d+v/5f/8/a1fr/3P0vi1uG7H8AAACYIHf/y+MW+x8AAADayN3/irjF/gcAAIA2cve/Mm4Zsv/1//p//b/+X/+v/z+T/l//f0T/r//f+f36f/0/a1fr/3P33xW3DNn/AAAAMEHu/lfFLfY/AAAAtJG7/9Vxi/0PAAAAbeTuf03cMmT/6//1//p//b/+X/9/Jv2//v+I/l//v/P79f/6f9au1v/n7n9t3DJk/wMAAMAEuftfF7fY/wAAANBG7v7Xxy32PwAAALSRu/8NccuQ/a//1//r//X/+n/9/5n0//r/I/p//f/O79f/6/9Zu1r/n7v/jXHLkP0PAAAAE+Tuf1PcYv8DAABAG7n73xy32P8AAADQRu7+t8QtQ/a//l//r//X/+v/9f9n0v/r/4/o//X/O79f/6//Z+1q/X/u/rfGLUP2PwAAAEyQu//uuMX+BwAAgDZy978tbrH/AQAAoI3c/W+PW4bsf/2//l//r//X/+v/z6T/1/8f0f/r/3d+v/5f/8/a1fr/3P33xC1D9j8AAABMkLv/HXGL/Q8AAABt5O5/Z9xi/wMAAEAbufvfFbcM2f/6f/2//l//r//X/59J/6//P6L/1//v/H79v/6ftav1/7n73x23DNn/AAAAMEHu/vfELfY/AAAAtJG7/71xi/0PAAAAbeTuf1/cMmT/6//1//p//b/+/9T+/zb9v/5f//+/6f/1/zu/X/+v/2ftlvf/997vP38Yv3P3vz9uGbL/AQAAYILc/R+IW+x/AAAAaCN3/wfjFvsfAAAA2sjd/6G4Zcj+1//r//X/+n/9v+//n0n/r/8/ov/X/+/8fv2//p+1W97//9fv3P0fjluG7H8AAACYIHf/R+IW+x8AAADayN3/0bjF/gcAAIA2cvd/LG4Zsv/1//p//b/+X/+v/z+T/l//f0T/r//f+f36f/0/a1fr/3P3fzxuGbL/AQAAYILc/Z+IW+x/AAAAaCN3/yfjFvsfAAAA2sjd/6m4Zcj+1//r//X/+n/9v/7/TPp//f8R/b/+f+f36//1/6xdrf/P3f/puGXI/gcAAIAJcvd/Jm6x/wEAAKCN3P2fjVvsfwAAAGgjd//n4pYh+1//r//X/+v/9f/6/zPp//X/R/T/+v+d36//1/+zdrX+P3f/5+OWIfsfAAAAJsjd/4W4xf4HAACANnL33xu32P8AAADQRu7+L8YtQ/a//l//r//X/+v/9f9n0v/r/4/o//X/O79f/6//Z+1q/X/u/i/FLUP2PwAAAEyQu//LcYv9DwAAAG3k7v9K3GL/AwAAQBu5+78atwzZ//p//b/+X/+v/9f/n0n/r/8/ov/X/+/8fv2//p+1q/X/ufu/FrcM2f8AAAAwQe7+r8ct9j8AAAC0kbv/G3GL/Q8AAABt5O7/ZtwyZP/r//X/+n/9v/5f/38m/b/+/4j+X/+/8/v1//p/1q7W/+fu/1bcMmT/AwAAwAS5+78dt9j/AAAA0Ebu/u/ELfY/AAAAtJG7/7txy5D9r//X/+v/9f/6f/3/mfT/+v8j+n/9/87v1//r/1m7Wv+fu/97ccuQ/Q8AAAAT5O7/ftxi/wMAAEAbuft/ELfY/wAAANBG7v4fxi1D9r/+X/+v/9f/6//1/2fS/+v/j+j/9f87v1//r/9n7Wr9f+7+H8UtQ/Y/AAAATJC7/8dxi/0PAAAAbeTu/0ncYv8DAABAG7n7fxq3DNn/+n/9v/5f/6//1/+fSf+v/z+i/9f/7/x+/b/+n7Wr9f+5+38WtwzZ/wAAADBB7v6fxy32PwAAALSRu/8XcYv9DwAAAG3k7v9l3DJk/+v/9f/6f/2//l//fyb9v/7/iP5f/7/z+/X/+n/Wrtb/5+7/VdwyZP8DAADABLn7fx232P8AAADQRu7+38Qt9j8AAAC0kbv/t3HLkP2v/9f/6//1//p//f+Z9P/6/yP6f/3/zu/X/+v/Wbta/5+7/3dxy5D9DwAAABPk7v993GL/AwAAQBu5+/8Qt9j/AAAA0Ebu/j/GLUP2v/5f/6//1//r//X/Z9L/6/+P6P/1/zu/X/+v/2ftav1/7v4/xS1D9j8AAABMkLv/z3GL/Q8AAABt5O7/S9xi/wMAAEAbufv/GrcM2f/6f/2//l//r//X/59J/6//P6L/1//v/H79v/6ftav1/7n7/xa3DNn/AAAAMEHu/r/HLfY/AAAAtJG7/x9xi/0PAAAAbeTu/2fcMmT/6//1//p//b/+X/9/Jv2//v+I/l//v/P79f/6f9au1v/n7v9XAAAA//8rCDvr") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') truncate(&(0x7f0000000080)='./file1\x00', 0xf000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.854991404s ago: executing program 2 (id=7387): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xb8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 749.217487ms ago: executing program 8 (id=7388): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xc4, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) pselect6(0x40, &(0x7f0000000380)={0x3a, 0x20000, 0x3, 0x20000000, 0x3, 0xfffffffffffffffe, 0x0, 0x2b980000}, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000000c0)={0x14}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ppoll(&(0x7f0000000280)=[{r4, 0x2012}, {r3, 0x8010}, {r3, 0xa00}, {r3, 0x608}], 0x4, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000340)={[0x4]}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 747.956761ms ago: executing program 3 (id=7389): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'ghash\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=@newtaction={0x120, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x10c, 0x1, [@m_skbedit={0xa8, 0x18, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x69d}]}, {0x43, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9f17c47463bf4e7af"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x120}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 650.880277ms ago: executing program 5 (id=7391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000010405060000000000000000070000040500010003000000b1d75ce5b343ace6bc8ceca8ae0138c51b3f52f25229508b9386daa171b19a8c01a654164762724c163341b01b4df7e1e9cadf350e207dca432d8f6cf462c5407fe905c4769ba177800854e72f77bc07833e5c0d5fee38718c07c9e98be25d83a3de23f6d5a98bb65a001f6029ebdc1169d0f63f9bf7cd80e3ed4d21c4ac4da50927b58bcfff2c054b4d42b875"], 0x1c}}, 0x2008804) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x24, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}]}, @NFT_MSG_DELSETELEM={0x2c8, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2b4, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe63e}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7cf1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xfa, 0x6, 0x1, 0x0, "495a336ea157481e2a2e610673b09c3bdd94b74f48b3d20a75c05642eefea2429bdd6961c115ca7af5ebd02ecbe8c16a240a647a3d61c7fee812b0eef5a0555ba4780c2ff243e7226c9bb8ac2b42d7740c78b11c2a6199bb53936b2c13472ef06e248f4ca09b8f0d3fdbfcf3a7144d1c66983d6d07667b97baf22a5c15e4ee6bd3abc39bc8caef04e6187b92f3eb5bb9da3474b559bec037a53a6feb2908fdb272495040c9bafaf2c5e2eb34c77bb55d3aa167277e68015363a0be4a3d31ef48b6d7e902e9a865c6ed2474e52eed4545e7b3cb85158aa6f355a2531393103928aeff12e185b6e867a114f566290d12df811adbc7e6e8"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xce4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2042}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}]}]}, @NFT_MSG_DELOBJ={0xac, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x3c, 0x8, "72d0e2768d0e1d2e5b15d4b8ab75acb734debb74eb0c4ed3211fa2ebe4d75ade1e2929f6e02364766cb61c485bdd0cf908e6a794be16756c"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3e8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0xc412, &(0x7f00000000c0), 0x1, 0x4fe, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x5b48670f7c8a1a45, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x327b, 0x220002) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 590.937546ms ago: executing program 2 (id=7392): r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80900) r1 = socket(0x2, 0x1, 0x100) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 300.47068ms ago: executing program 3 (id=7393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19b5520e4cea663b}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004040}, 0x42880) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x4002, 0x20, 0x36}, 0x18) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r12, 0x29, 0x10, 0x0, 0x0) 0s ago: executing program 8 (id=7394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x318, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x304, 0x1, [@m_skbmod={0xa8, 0x1f, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x10001, 0x5, 0x1, 0x8a}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x158, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x129, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0xb4, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x20000000, 0x3, 0x7}, @local, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x3, 0xa2d5, 0x1}, @rand_addr=0x64010100, @private=0xa010102, 0xff000000, 0x1}}]}, {0x39, 0x6, "507e1baf70350ba63c9fdba3ace3ff69773db861d8a2e332d6b16db257bc0277a998c2a2037a7e3928486948fe0d47d2df6a88cb91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x4c, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x1d, 0x6, "63ddc58aeeea76aadf42158ae681bee82d74147297a5c67a53"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x318}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 5436] »»»»»» speed is unknown, defaulting to 1000 [ 1608.252974][T25436] lo speed is unknown, defaulting to 1000 [ 1608.259892][T25436] dummy0 speed is unknown, defaulting to 1000 [ 1608.472871][T25436] lo speed is unknown, defaulting to 1000 [ 1609.786286][T25458] loop7: detected capacity change from 0 to 40427 [ 1609.859694][T25458] F2FS-fs (loop7): Invalid log sectorsize (24) [ 1609.865996][T25458] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1610.007784][T25458] F2FS-fs (loop7): Unrecognized mount option "" or missing value [ 1611.758804][T25501] overlay: ./file0 is not a directory [ 1612.039394][T25496] netlink: 'syz.6.6275': attribute type 10 has an invalid length. [ 1612.567385][T25496] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1612.786772][T25517] loop7: detected capacity change from 0 to 2048 [ 1612.794583][T25517] udf: Bad value for 'umask' [ 1613.074448][T25520] loop7: detected capacity change from 0 to 2048 [ 1613.091387][T25520] udf: Bad value for 'umask' [ 1613.390088][T25529] block nbd7: NBD_DISCONNECT [ 1613.396463][T25529] block nbd7: Send disconnect failed -107 [ 1613.403179][T25529] block nbd7: Disconnected due to user request. [ 1613.412938][T25529] block nbd7: shutting down sockets [ 1613.452694][T25531] overlayfs: failed to resolve './file0': -2 [ 1614.082557][T17041] Bluetooth: hci0: command 0x0406 tx timeout [ 1614.850352][T25549] siw: device registration error -23 [ 1617.108090][T25581] overlayfs: failed to resolve './file0': -2 [ 1617.437077][T25597] siw: device registration error -23 [ 1621.434042][T25628] overlayfs: failed to resolve './file0': -2 [ 1622.188140][T25642] siw: device registration error -23 [ 1622.268838][T25644] FAULT_INJECTION: forcing a failure. [ 1622.268838][T25644] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.281573][T25644] CPU: 0 UID: 0 PID: 25644 Comm: syz.7.6325 Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1622.292357][T25644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1622.302425][T25644] Call Trace: [ 1622.305713][T25644] [ 1622.308651][T25644] dump_stack_lvl+0x241/0x360 [ 1622.313361][T25644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.318585][T25644] ? __pfx__printk+0x10/0x10 [ 1622.323201][T25644] ? fs_reclaim_acquire+0x93/0x130 [ 1622.328329][T25644] ? __pfx___might_resched+0x10/0x10 [ 1622.333635][T25644] should_fail_ex+0x3b0/0x4e0 [ 1622.338352][T25644] should_failslab+0xac/0x100 [ 1622.343054][T25644] __kmalloc_noprof+0xdd/0x4c0 [ 1622.347842][T25644] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1622.353592][T25644] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1622.359178][T25644] tomoyo_path_number_perm+0x236/0x860 [ 1622.364666][T25644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.370315][T25644] ? __lock_acquire+0x1397/0x2100 [ 1622.375360][T25644] ? tomoyo_path_number_perm+0x206/0x860 [ 1622.381026][T25644] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1622.387079][T25644] ? __fget_files+0x2a/0x410 [ 1622.391695][T25644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.397345][T25644] ? __fget_files+0x2a/0x410 [ 1622.401968][T25644] security_file_ioctl+0xc6/0x2a0 [ 1622.407030][T25644] __se_sys_ioctl+0x46/0x170 [ 1622.411640][T25644] do_syscall_64+0xf3/0x230 [ 1622.416271][T25644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.422199][T25644] RIP: 0033:0x7fae75985d29 [ 1622.426657][T25644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.446276][T25644] RSP: 002b:00007fae737d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1622.454711][T25644] RAX: ffffffffffffffda RBX: 00007fae75b76160 RCX: 00007fae75985d29 [ 1622.462694][T25644] RDX: 0000000020000000 RSI: 00000000c0383e04 RDI: 000000000000000a [ 1622.470678][T25644] RBP: 00007fae737d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.478661][T25644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.486639][T25644] R13: 0000000000000000 R14: 00007fae75b76160 R15: 00007ffc9573d388 [ 1622.494665][T25644] [ 1622.499181][T25644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1623.257776][T25653] netlink: 'syz.2.6330': attribute type 10 has an invalid length. [ 1623.266115][T25653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1623.417205][T25655] »»»»»» speed is unknown, defaulting to 1000 [ 1623.431418][T25655] lo speed is unknown, defaulting to 1000 [ 1623.443190][T25655] dummy0 speed is unknown, defaulting to 1000 [ 1624.114905][T25655] lo speed is unknown, defaulting to 1000 [ 1624.808360][T25674] netlink: 'syz.3.6337': attribute type 10 has an invalid length. [ 1625.522261][T25674] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1625.976996][ T29] audit: type=1326 audit(1736581992.632:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25660 comm="syz.6.6334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25dc185d29 code=0x0 [ 1626.190617][T25699] netlink: 'syz.2.6347': attribute type 10 has an invalid length. [ 1626.210393][T25699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6347'. [ 1626.233310][T25701] netlink: 'syz.3.6348': attribute type 10 has an invalid length. [ 1626.241669][T25701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1626.251278][T25701] batadv0: entered promiscuous mode [ 1626.256732][T25701] batadv0: entered allmulticast mode [ 1626.263569][T25701] bridge0: port 1(batadv0) entered blocking state [ 1626.271270][T25701] bridge0: port 1(batadv0) entered disabled state [ 1626.280035][T25701] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1626.619709][T25714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1626.702259][T25718] netlink: 'syz.2.6355': attribute type 10 has an invalid length. [ 1626.726102][T25718] bridge0: port 1(batadv0) entered disabled state [ 1626.742713][T25718] bridge0: port 1(batadv0) entered blocking state [ 1626.749337][T25718] bridge0: port 1(batadv0) entered forwarding state [ 1626.783321][T25718] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1626.798727][T23567] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1626.957673][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6356'. [ 1626.967094][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6356'. [ 1626.976590][T25723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6356'. [ 1627.008586][T23567] usb 8-1: Using ep0 maxpacket: 8 [ 1627.188161][T23567] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1627.197892][T23567] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.074601][T23567] usb 8-1: Product: syz [ 1628.078885][T23567] usb 8-1: Manufacturer: syz [ 1628.083500][T23567] usb 8-1: SerialNumber: syz [ 1628.090950][T23567] usb 8-1: config 0 descriptor?? [ 1628.301276][T23567] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1628.323524][T25735] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6361'. [ 1628.449758][T25735] unsupported nlmsg_type 40 [ 1628.493121][T25739] netlink: 'syz.6.6362': attribute type 10 has an invalid length. [ 1628.536145][T25739] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6362'. [ 1628.895424][T25739] batadv0: entered promiscuous mode [ 1629.450007][T25739] batadv0: entered allmulticast mode [ 1629.456313][T25739] bridge0: port 1(batadv0) entered blocking state [ 1629.491125][T23567] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1629.503047][T23567] usb 8-1: USB disconnect, device number 3 [ 1629.558928][T25739] bridge0: port 1(batadv0) entered disabled state [ 1629.575809][T25739] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1629.649894][T25749] block nbd7: shutting down sockets [ 1629.658660][T25748] netlink: 'syz.7.6364': attribute type 10 has an invalid length. [ 1629.666645][T25748] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6364'. [ 1629.677348][T25748] batadv0: entered promiscuous mode [ 1629.686957][T25748] batadv0: entered allmulticast mode [ 1629.700334][T25748] bridge0: port 3(batadv0) entered blocking state [ 1629.707318][T25748] bridge0: port 3(batadv0) entered disabled state [ 1629.750368][T25748] bridge0: port 3(batadv0) entered blocking state [ 1629.756885][T25748] bridge0: port 3(batadv0) entered forwarding state [ 1629.887453][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6367'. [ 1629.949512][ T3005] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1629.959185][ T3005] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1629.961949][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6367'. [ 1632.012528][T25777] block device autoloading is deprecated and will be removed. [ 1632.567750][T25790] netlink: 'syz.4.6379': attribute type 10 has an invalid length. [ 1632.610797][T25790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6379'. [ 1632.630035][T25794] netlink: 'syz.3.6382': attribute type 10 has an invalid length. [ 1632.675255][T25794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6382'. [ 1632.685052][T25790] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1632.762224][T25791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6379'. [ 1632.808807][T25794] bridge0: port 1(batadv0) entered blocking state [ 1632.815438][T25794] bridge0: port 1(batadv0) entered disabled state [ 1632.846588][T25794] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1634.491105][T25816] ip6gretap0: entered promiscuous mode [ 1634.520555][T25825] x_tables: duplicate underflow at hook 1 [ 1634.526629][T25825] x_tables: duplicate underflow at hook 1 [ 1634.532866][T25825] x_tables: duplicate underflow at hook 1 [ 1634.540105][T25825] x_tables: duplicate underflow at hook 1 [ 1634.545928][T25825] x_tables: duplicate underflow at hook 1 [ 1634.570725][T25825] x_tables: duplicate underflow at hook 1 [ 1634.609533][T25825] x_tables: duplicate underflow at hook 1 [ 1634.666519][T25825] x_tables: duplicate underflow at hook 1 [ 1634.704250][T25825] x_tables: duplicate underflow at hook 1 [ 1634.783624][T25825] x_tables: duplicate underflow at hook 1 [ 1634.785340][T25816] batadv_slave_0: entered promiscuous mode [ 1634.810331][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6392'. [ 1634.930470][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 1634.936556][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 1635.118186][T25840] netlink: 'syz.6.6397': attribute type 10 has an invalid length. [ 1635.180270][T25840] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6397'. [ 1635.240261][T25840] bridge0: port 1(batadv0) entered blocking state [ 1635.269337][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 1635.275498][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 1635.303716][T25840] bridge0: port 1(batadv0) entered disabled state [ 1635.337157][T25840] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1635.343925][T25834] ceph: No mds server is up or the cluster is laggy [ 1635.394683][T25845] »»»»»» speed is unknown, defaulting to 1000 [ 1635.413025][T25845] lo speed is unknown, defaulting to 1000 [ 1635.489653][T25845] dummy0 speed is unknown, defaulting to 1000 [ 1635.674992][T25854] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6404'. [ 1636.989186][T25845] lo speed is unknown, defaulting to 1000 [ 1637.320971][T25874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1637.684178][T25875] »»»»»» speed is unknown, defaulting to 1000 [ 1637.785019][T25875] lo speed is unknown, defaulting to 1000 [ 1637.828586][T25875] dummy0 speed is unknown, defaulting to 1000 [ 1637.869417][T25884] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6414'. [ 1638.287843][T25875] lo speed is unknown, defaulting to 1000 [ 1638.450747][T25887] ipt_rpfilter: unknown options [ 1638.777239][T25893] netlink: 'syz.3.6417': attribute type 10 has an invalid length. [ 1638.838712][T25893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6417'. [ 1639.042288][T25893] bridge0: port 1(batadv0) entered blocking state [ 1639.051870][T25893] bridge0: port 1(batadv0) entered disabled state [ 1639.098250][T25893] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1639.975598][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 1639.984497][T25900] ceph: No mds server is up or the cluster is laggy [ 1639.991462][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 1640.313219][T25914] siw: device registration error -23 [ 1642.410228][T25955] netlink: 'syz.3.6435': attribute type 10 has an invalid length. [ 1642.585662][T25958] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1643.804910][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 1643.812030][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 1643.946850][T25979] ceph: No mds server is up or the cluster is laggy [ 1644.220442][T25988] netlink: 18 bytes leftover after parsing attributes in process `syz.6.6445'. [ 1646.018940][T26001] siw: device registration error -23 [ 1646.176600][T26006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1646.325697][T26004] loop7: detected capacity change from 0 to 32768 [ 1646.349367][T26004] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6450 (26004) [ 1646.462132][T26004] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1646.474057][T26004] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 1646.504084][T26004] BTRFS info (device loop7): disk space caching is enabled [ 1646.555048][T26004] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1646.925973][T26034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6459'. [ 1647.059094][T26004] BTRFS info (device loop7): rebuilding free space tree [ 1647.120875][T26004] BTRFS info (device loop7): disabling free space tree [ 1647.128010][T26004] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1647.138626][T26004] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1647.336738][T26004] BTRFS info (device loop7): balance: start -f -susage=18446744073709551615,vrange=5..4294967296 [ 1647.366791][T26004] BTRFS info (device loop7): balance: paused [ 1647.470498][T23948] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1647.560677][T26066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6469'. [ 1648.111851][T15860] libceph: connect (1)[c::]:6789 error -101 [ 1648.118903][T15860] libceph: mon0 (1)[c::]:6789 connect error [ 1648.382734][T15860] libceph: connect (1)[c::]:6789 error -101 [ 1648.391347][T15860] libceph: mon0 (1)[c::]:6789 connect error [ 1648.582205][T26073] ceph: No mds server is up or the cluster is laggy [ 1648.699459][T26078] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6473'. [ 1648.814726][T26079] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6470'. [ 1648.885508][T26085] 9pnet_fd: Insufficient options for proto=fd [ 1650.298688][T23922] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1650.357240][T26112] netlink: 'syz.4.6487': attribute type 10 has an invalid length. [ 1650.384743][T26112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6487'. [ 1650.409422][T26112] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1650.416816][T26118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6487'. [ 1650.484676][T23922] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1650.494641][T23922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.527365][T23922] usb 8-1: Product: syz [ 1650.531769][T23922] usb 8-1: Manufacturer: syz [ 1650.545349][T23922] usb 8-1: SerialNumber: syz [ 1650.572007][T23922] usb 8-1: config 0 descriptor?? [ 1650.582722][T26123] 9pnet_fd: Insufficient options for proto=fd [ 1650.614852][T26121] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6489'. [ 1650.646739][T26121] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.668335][T26121] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.697150][T26124] Invalid source name [ 1650.715222][T26121] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.736975][T26124] UBIFS error (pid: 26124): cannot open "/dev/sg0", error -22 [ 1650.739196][T26121] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.808898][T23922] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1650.880215][T26128] netlink: 'syz.2.6492': attribute type 10 has an invalid length. [ 1650.900660][T26128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6492'. [ 1651.123242][T26141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6497'. [ 1651.156135][T23922] usb 8-1: USB disconnect, device number 4 [ 1651.314668][T26148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'. [ 1651.344269][ T29] audit: type=1326 audit(1736582017.992:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26146 comm="syz.3.6500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfb9985d29 code=0x0 [ 1651.421651][T26148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'. [ 1651.531874][T26155] netlink: 'syz.6.6503': attribute type 10 has an invalid length. [ 1651.547927][T26155] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6503'. [ 1651.568777][T26155] bridge0: port 1(batadv0) entered blocking state [ 1651.575531][T26155] bridge0: port 1(batadv0) entered disabled state [ 1651.620230][T26155] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1651.641639][ T29] audit: type=1326 audit(1736582018.262:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26153 comm="syz.4.6501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65ae985d29 code=0x0 [ 1651.664888][T26161] 9pnet_fd: Insufficient options for proto=fd [ 1651.775988][T26160] bond0: (slave bridge0): Releasing backup interface [ 1651.869603][T26164] mkiss: ax0: crc mode is auto. [ 1652.742730][T26196] 9pnet_fd: Insufficient options for proto=fd [ 1654.612100][T17041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1654.623907][T17041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1654.633401][T17041] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1654.674820][T17041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1654.685619][T17041] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1654.694695][T17041] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1655.048689][ T5887] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1655.153146][T26224] »»»»»» speed is unknown, defaulting to 1000 [ 1655.249719][T26224] lo speed is unknown, defaulting to 1000 [ 1655.271169][T26235] »»»»»» speed is unknown, defaulting to 1000 [ 1655.299900][T26224] dummy0 speed is unknown, defaulting to 1000 [ 1655.309534][T26235] lo speed is unknown, defaulting to 1000 [ 1655.322245][ T5887] usb 8-1: Using ep0 maxpacket: 8 [ 1655.341232][ T5887] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1655.385671][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.418570][ T5887] usb 8-1: Product: syz [ 1655.422759][ T5887] usb 8-1: Manufacturer: syz [ 1655.498552][ T5887] usb 8-1: SerialNumber: syz [ 1655.584199][T26242] 9pnet_fd: Insufficient options for proto=fd [ 1655.593174][ T5887] usb 8-1: config 0 descriptor?? [ 1655.830254][ T5887] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1656.034359][T26235] dummy0 speed is unknown, defaulting to 1000 [ 1656.049296][T26224] lo speed is unknown, defaulting to 1000 [ 1656.099593][T26244] __nla_validate_parse: 1 callbacks suppressed [ 1656.099642][T26244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6534'. [ 1656.555283][T26235] lo speed is unknown, defaulting to 1000 [ 1656.681162][T26224] chnl_net:caif_netlink_parms(): no params data found [ 1656.859335][T14771] Bluetooth: hci6: command tx timeout [ 1657.099904][ T5887] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1657.362007][T26224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.381974][T26224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.403837][T26224] bridge_slave_0: entered allmulticast mode [ 1657.428126][T26224] bridge_slave_0: entered promiscuous mode [ 1657.453718][T26224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.482968][T26260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6539'. [ 1657.499107][T26224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.527747][T26224] bridge_slave_1: entered allmulticast mode [ 1657.548857][ T5895] usb 8-1: USB disconnect, device number 5 [ 1657.576152][T26224] bridge_slave_1: entered promiscuous mode [ 1659.456897][T14771] Bluetooth: hci6: command tx timeout [ 1659.521325][T26224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.630196][T26224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.888984][T26277] 9pnet_fd: Insufficient options for proto=fd [ 1661.084551][T26285] netlink: 'syz.6.6547': attribute type 10 has an invalid length. [ 1661.209039][T26224] team0: Port device team_slave_0 added [ 1661.222037][T26289] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1661.244320][T26224] team0: Port device team_slave_1 added [ 1661.262458][T26283] loop7: detected capacity change from 0 to 4096 [ 1661.272773][T26283] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1661.368724][T26291] overlay: ./file0 is not a directory [ 1661.569647][T17041] Bluetooth: hci6: command tx timeout [ 1661.902434][T26283] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1661.989368][T26283] ntfs3(loop7): Failed to load $Extend (-22). [ 1662.008322][T26224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.015508][T26283] ntfs3(loop7): Failed to initialize $Extend. [ 1662.036438][T26224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.111061][T26224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.173384][T26224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.183678][T26224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.245506][T26224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.457289][T26224] hsr_slave_0: entered promiscuous mode [ 1662.519405][T26224] hsr_slave_1: entered promiscuous mode [ 1662.550162][T26302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6553'. [ 1662.578458][T26224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1662.586038][T26224] Cannot create hsr debugfs directory [ 1662.795995][T26305] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6554'. [ 1663.943323][T17041] Bluetooth: hci6: command tx timeout [ 1664.350186][T26316] netlink: 'syz.4.6558': attribute type 10 has an invalid length. [ 1664.418566][T26316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6558'. [ 1664.580047][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6558'. [ 1665.034983][T26224] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.212677][T26316] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1665.445055][T26224] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.469865][T26329] netlink: 'syz.3.6559': attribute type 10 has an invalid length. [ 1665.797934][T26333] overlay: ./file0 is not a directory [ 1666.493876][T26224] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.600512][T26339] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6568'. [ 1666.645146][T26343] netlink: 'syz.5.6565': attribute type 10 has an invalid length. [ 1666.664893][T26342] netlink: 'syz.4.6567': attribute type 10 has an invalid length. [ 1666.710858][T26345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1666.741387][T26224] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.826913][T26342] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1667.251609][T26349] Illegal XDP return value 4294967274 on prog (id 1113) dev N/A, expect packet loss! [ 1667.274174][T26224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1667.366579][T26224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1667.440736][T26224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1667.868695][T26224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1668.324630][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.469280][T26368] »»»»»» speed is unknown, defaulting to 1000 [ 1668.507960][T26224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.540659][T26370] netlink: 'syz.5.6576': attribute type 10 has an invalid length. [ 1668.549174][T26224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.555890][T26370] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6576'. [ 1668.568048][T26370] batadv0: entered promiscuous mode [ 1668.573682][T26370] batadv0: entered allmulticast mode [ 1668.582609][T26370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.591502][T26370] bridge0: port 1(batadv0) entered blocking state [ 1668.597983][T26370] bridge0: port 1(batadv0) entered disabled state [ 1668.616724][T26370] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1668.630570][T26371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6576'. [ 1668.708879][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.716055][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.860434][T26371] bond0: (slave bridge0): Releasing backup interface [ 1669.066290][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.073498][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.126730][T26374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6577'. [ 1669.139861][T26379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6577'. [ 1669.156652][T26366] loop7: detected capacity change from 0 to 32768 [ 1669.159591][T26377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1669.247770][T26383] overlay: ./file0 is not a directory [ 1669.504390][T26366] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1669.745877][T26381] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6577'. [ 1669.884517][T26366] XFS (loop7): Ending clean mount [ 1669.900324][T26224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1670.079415][T26400] netlink: 'syz.4.6582': attribute type 10 has an invalid length. [ 1670.130594][T26404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6583'. [ 1670.191598][T23948] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1671.413780][T26224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.715006][T26224] veth0_vlan: entered promiscuous mode [ 1671.823953][T26224] veth1_vlan: entered promiscuous mode [ 1671.953051][ T29] audit: type=1326 audit(1736582038.582:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26427 comm="syz.3.6591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9985d29 code=0x0 [ 1672.033058][T26224] veth0_macvtap: entered promiscuous mode [ 1672.044899][T26224] veth1_macvtap: entered promiscuous mode [ 1672.064964][T26224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1672.076972][T26224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.087567][T26224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1672.098084][T26224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.108143][T26224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1672.118663][T26224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.129998][T26224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1672.141403][T26224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1672.152258][T26224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.162612][T26224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1672.174004][T26224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.184475][T26224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1672.194974][T26224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.206105][T26224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1672.217391][T26224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.226239][T26224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.235071][T26224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.243912][T26224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.576514][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.596589][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.325018][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.343557][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.599157][T26456] netlink: 'syz.4.6597': attribute type 10 has an invalid length. [ 1673.620973][T26458] FAULT_INJECTION: forcing a failure. [ 1673.620973][T26458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.668142][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6599'. [ 1673.695641][T26458] CPU: 0 UID: 0 PID: 26458 Comm: syz.2.6525 Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1673.706563][T26458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1673.716642][T26458] Call Trace: [ 1673.719940][T26458] [ 1673.722895][T26458] dump_stack_lvl+0x241/0x360 [ 1673.727615][T26458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1673.732852][T26458] ? __pfx__printk+0x10/0x10 [ 1673.737483][T26458] ? __pfx_lock_release+0x10/0x10 [ 1673.742548][T26458] should_fail_ex+0x3b0/0x4e0 [ 1673.747276][T26458] _copy_from_user+0x2f/0xc0 [ 1673.751906][T26458] copy_msghdr_from_user+0xae/0x680 [ 1673.757147][T26458] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1673.762988][T26458] ? __fget_files+0x2a/0x410 [ 1673.767615][T26458] ? __fget_files+0x2a/0x410 [ 1673.772248][T26458] __sys_sendmsg+0x209/0x350 [ 1673.776872][T26458] ? __pfx_lock_release+0x10/0x10 [ 1673.781934][T26458] ? __pfx___sys_sendmsg+0x10/0x10 [ 1673.787092][T26458] ? __pfx_vfs_write+0x10/0x10 [ 1673.791912][T26458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1673.798271][T26458] ? do_syscall_64+0x100/0x230 [ 1673.803077][T26458] ? do_syscall_64+0xb6/0x230 [ 1673.807779][T26458] do_syscall_64+0xf3/0x230 [ 1673.812307][T26458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.818226][T26458] RIP: 0033:0x7f4cabd85d29 [ 1673.822644][T26458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1673.842254][T26458] RSP: 002b:00007f4cacca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.850678][T26458] RAX: ffffffffffffffda RBX: 00007f4cabf75fa0 RCX: 00007f4cabd85d29 [ 1673.858655][T26458] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1673.866627][T26458] RBP: 00007f4cacca1090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.874599][T26458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.882596][T26458] R13: 0000000000000000 R14: 00007f4cabf75fa0 R15: 00007ffd83cd06a8 [ 1673.890690][T26458] [ 1674.768614][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6602'. [ 1674.777530][T26472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6602'. [ 1675.596591][T26477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6604'. [ 1676.053173][T26487] »»»»»» speed is unknown, defaulting to 1000 [ 1676.069539][T26487] lo speed is unknown, defaulting to 1000 [ 1676.087663][T26487] dummy0 speed is unknown, defaulting to 1000 [ 1676.639040][T26508] block nbd2: NBD_DISCONNECT [ 1676.643708][T26508] block nbd2: Send disconnect failed -107 [ 1676.673258][T26506] block nbd2: Disconnected due to user request. [ 1676.723479][T26508] netlink: 'syz.2.6614': attribute type 10 has an invalid length. [ 1676.747458][T26508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6614'. [ 1676.774683][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6614'. [ 1676.947806][T26508] batadv0: entered promiscuous mode [ 1676.953621][T26506] block nbd2: shutting down sockets [ 1677.026678][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6616'. [ 1677.035919][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6616'. [ 1677.145165][T26508] batadv0: entered allmulticast mode [ 1677.276693][T26508] bridge0: port 3(batadv0) entered blocking state [ 1677.688557][T26508] bridge0: port 3(batadv0) entered disabled state [ 1677.703413][T26508] bridge0: port 3(batadv0) entered blocking state [ 1677.709936][T26508] bridge0: port 3(batadv0) entered forwarding state [ 1677.721786][ T960] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1677.731143][ T960] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1677.896038][T26487] lo speed is unknown, defaulting to 1000 [ 1677.901077][T26513] bridge0: port 3(batadv0) entered disabled state [ 1677.935364][ T29] audit: type=1326 audit(1736582044.582:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9985d29 code=0x7ffc0000 [ 1677.957943][ T29] audit: type=1326 audit(1736582044.582:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9985d29 code=0x7ffc0000 [ 1677.988452][ T29] audit: type=1326 audit(1736582044.592:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fbfb9985d29 code=0x7ffc0000 [ 1678.011731][ T29] audit: type=1326 audit(1736582044.592:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9985d29 code=0x7ffc0000 [ 1678.034795][ T29] audit: type=1326 audit(1736582044.592:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9985d29 code=0x7ffc0000 [ 1678.057320][ T29] audit: type=1326 audit(1736582044.592:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbfb9985d29 code=0x7ffc0000 [ 1678.081723][ T29] audit: type=1326 audit(1736582044.592:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbfb9985d63 code=0x7ffc0000 [ 1678.103979][ T29] audit: type=1326 audit(1736582044.592:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbfb99847df code=0x7ffc0000 [ 1678.127293][ T29] audit: type=1326 audit(1736582044.632:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbfb9985db7 code=0x7ffc0000 [ 1678.150705][ T29] audit: type=1326 audit(1736582044.632:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.3.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfb9984690 code=0x7ffc0000 [ 1678.269338][T26513] bridge_slave_1: left allmulticast mode [ 1678.296024][T26513] bridge_slave_1: left promiscuous mode [ 1678.326463][T26513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.505883][T17041] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 1679.489222][T26513] bridge_slave_0: left allmulticast mode [ 1679.518536][T26513] bridge_slave_0: left promiscuous mode [ 1679.524273][T26513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.999225][T26533] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6621'. [ 1680.506690][T26545] FAULT_INJECTION: forcing a failure. [ 1680.506690][T26545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.552533][T26545] CPU: 0 UID: 0 PID: 26545 Comm: syz.2.6624 Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1680.563329][T26545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1680.573399][T26545] Call Trace: [ 1680.576691][T26545] [ 1680.579632][T26545] dump_stack_lvl+0x241/0x360 [ 1680.584348][T26545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1680.589577][T26545] ? __pfx__printk+0x10/0x10 [ 1680.594200][T26545] ? __pfx_lock_release+0x10/0x10 [ 1680.599269][T26545] should_fail_ex+0x3b0/0x4e0 [ 1680.603983][T26545] _copy_from_user+0x2f/0xc0 [ 1680.608605][T26545] core_sys_select+0x508/0x910 [ 1680.613405][T26545] ? __pfx_core_sys_select+0x10/0x10 [ 1680.618715][T26545] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1680.624649][T26545] ? __pfx_vfs_write+0x10/0x10 [ 1680.629421][T26545] ? __pfx_set_user_sigmask+0x10/0x10 [ 1680.634812][T26545] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1680.640807][T26545] ? __fget_files+0x2a/0x410 [ 1680.645415][T26545] __se_sys_pselect6+0x323/0x3f0 [ 1680.650371][T26545] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1680.655840][T26545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1680.662180][T26545] ? do_syscall_64+0x100/0x230 [ 1680.666967][T26545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.672633][T26545] ? __x64_sys_pselect6+0x21/0xf0 [ 1680.677686][T26545] do_syscall_64+0xf3/0x230 [ 1680.682217][T26545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.688129][T26545] RIP: 0033:0x7f4cabd85d29 [ 1680.692544][T26545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.712158][T26545] RSP: 002b:00007f4cacca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1680.720582][T26545] RAX: ffffffffffffffda RBX: 00007f4cabf75fa0 RCX: 00007f4cabd85d29 [ 1680.728556][T26545] RDX: 0000000000000000 RSI: 00000000200045c0 RDI: 0000000000000040 [ 1680.736527][T26545] RBP: 00007f4cacca1090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.744500][T26545] R10: 0000000020004640 R11: 0000000000000246 R12: 0000000000000001 [ 1680.752473][T26545] R13: 0000000000000000 R14: 00007f4cabf75fa0 R15: 00007ffd83cd06a8 [ 1680.760552][T26545] [ 1681.516015][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1681.525151][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1682.109155][T26561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1682.110459][T26554] loop7: detected capacity change from 0 to 2048 [ 1682.123204][T26554] udf: Unknown parameter '' [ 1683.656370][T26554] loop7: detected capacity change from 0 to 4096 [ 1685.140413][T26554] ntfs3(loop7): Failed to read $AttrDef (-4). [ 1686.613307][T26608] netlink: 'syz.5.6646': attribute type 10 has an invalid length. [ 1686.888535][T26615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1686.897468][T26615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1686.906438][T26615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1688.785031][T26632] FAULT_INJECTION: forcing a failure. [ 1688.785031][T26632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.898660][T26632] CPU: 1 UID: 0 PID: 26632 Comm: syz.2.6651 Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1688.909480][T26632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1688.919547][T26632] Call Trace: [ 1688.922835][T26632] [ 1688.925778][T26632] dump_stack_lvl+0x241/0x360 [ 1688.930488][T26632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1688.935701][T26632] ? __pfx__printk+0x10/0x10 [ 1688.940312][T26632] ? __pfx_lock_release+0x10/0x10 [ 1688.945354][T26632] should_fail_ex+0x3b0/0x4e0 [ 1688.950233][T26632] _copy_from_user+0x2f/0xc0 [ 1688.954839][T26632] copy_msghdr_from_user+0xae/0x680 [ 1688.960052][T26632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.965693][T26632] ? __lock_acquire+0x1397/0x2100 [ 1688.970738][T26632] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1688.976556][T26632] ? __fget_files+0x2a/0x410 [ 1688.981164][T26632] ? __fget_files+0x2a/0x410 [ 1688.985774][T26632] do_recvmmsg+0x3bd/0xab0 [ 1688.990219][T26632] ? __pfx_do_recvmmsg+0x10/0x10 [ 1688.995181][T26632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.000834][T26632] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1689.006748][T26632] ? ksys_write+0x22a/0x2b0 [ 1689.011259][T26632] ? __pfx_lock_release+0x10/0x10 [ 1689.016297][T26632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.021940][T26632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.027577][T26632] ? vfs_write+0x730/0xd30 [ 1689.032017][T26632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1689.038011][T26632] ? __fget_files+0x2a/0x410 [ 1689.042628][T26632] __x64_sys_recvmmsg+0x199/0x250 [ 1689.047666][T26632] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1689.053228][T26632] ? do_syscall_64+0x100/0x230 [ 1689.058010][T26632] ? do_syscall_64+0xb6/0x230 [ 1689.062706][T26632] do_syscall_64+0xf3/0x230 [ 1689.067234][T26632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.073149][T26632] RIP: 0033:0x7f4cabd85d29 [ 1689.077567][T26632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1689.097209][T26632] RSP: 002b:00007f4cacc80038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1689.105636][T26632] RAX: ffffffffffffffda RBX: 00007f4cabf76080 RCX: 00007f4cabd85d29 [ 1689.113614][T26632] RDX: 0000000000000001 RSI: 0000000020002f80 RDI: 0000000000000004 [ 1689.121768][T26632] RBP: 00007f4cacc80090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.129746][T26632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.137718][T26632] R13: 0000000000000001 R14: 00007f4cabf76080 R15: 00007ffd83cd06a8 [ 1689.145709][T26632] [ 1692.748663][T26672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6664'. [ 1693.702704][T26683] »»»»»» speed is unknown, defaulting to 1000 [ 1693.709935][T26683] lo speed is unknown, defaulting to 1000 [ 1693.716680][T26683] dummy0 speed is unknown, defaulting to 1000 [ 1693.821128][T26683] lo speed is unknown, defaulting to 1000 [ 1694.064624][T26668] loop7: detected capacity change from 0 to 32768 [ 1694.167289][T26668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6665 (26668) [ 1695.267341][T26668] BTRFS error (device loop7): open_ctree failed [ 1696.839556][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1697.008464][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 1697.017135][ T5887] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.028349][ T5887] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.038236][ T5887] usb 3-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1697.227855][ T5887] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1697.237011][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.348756][T26726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6680'. [ 1698.549100][T26725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1699.108938][ T5887] usbhid 3-1:32.0: can't add hid device: -71 [ 1699.115060][ T5887] usbhid 3-1:32.0: probe with driver usbhid failed with error -71 [ 1699.508018][ T5887] usb 3-1: USB disconnect, device number 5 [ 1699.614453][T26745] »»»»»» speed is unknown, defaulting to 1000 [ 1699.621920][T26745] lo speed is unknown, defaulting to 1000 [ 1699.629041][T26745] dummy0 speed is unknown, defaulting to 1000 [ 1699.753647][T26745] lo speed is unknown, defaulting to 1000 [ 1702.064910][T26773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1702.085467][T26773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6694'. [ 1702.894568][T26778] (unnamed net_device) (uninitialized): option use_carrier: invalid value (9) [ 1704.537334][T17041] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1704.842495][T26785] loop2: detected capacity change from 0 to 4096 [ 1704.909872][T26785] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1704.983481][T26785] ntfs3(loop2): Inode r=19 is not in use! [ 1704.998812][T17041] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1705.019521][T26785] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1705.109507][T26785] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1705.123773][T26785] ntfs3(loop2): ino=5, "/" attr_set_size [ 1705.477103][T26804] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6705'. [ 1707.115402][T26810] »»»»»» speed is unknown, defaulting to 1000 [ 1707.122769][T26810] lo speed is unknown, defaulting to 1000 [ 1707.132087][T26810] dummy0 speed is unknown, defaulting to 1000 [ 1707.256776][T26810] lo speed is unknown, defaulting to 1000 [ 1707.509498][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6710'. [ 1707.538789][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6710'. [ 1707.551103][T26818] netlink: 'syz.5.6709': attribute type 1 has an invalid length. [ 1707.648727][T24931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1708.770789][T24931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.769012][T24931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.778867][T24931] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1709.787909][T24931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.809020][T24931] usb 3-1: config 0 descriptor?? [ 1710.061877][T24931] usb 3-1: can't set config #0, error -71 [ 1710.104675][T24931] usb 3-1: USB disconnect, device number 6 [ 1710.132261][T26819] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1710.315928][T26839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1710.361785][T26839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1710.486526][T26839] macvlan1: entered promiscuous mode [ 1710.494405][T26842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6717'. [ 1710.588446][T26842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6717'. [ 1710.626740][T26839] macvlan1: left promiscuous mode [ 1710.690993][T26842] macvlan1: entered promiscuous mode [ 1710.720889][T26842] macvlan1: left promiscuous mode [ 1712.159084][T26857] »»»»»» speed is unknown, defaulting to 1000 [ 1712.172661][T26857] lo speed is unknown, defaulting to 1000 [ 1712.185558][T26857] dummy0 speed is unknown, defaulting to 1000 [ 1712.317153][T26857] lo speed is unknown, defaulting to 1000 [ 1713.393190][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6725'. [ 1713.420391][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6725'. [ 1715.663911][T26881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1715.827744][T26884] netlink: 'syz.6.6729': attribute type 10 has an invalid length. [ 1716.741012][T26895] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1718.859344][T26907] overlayfs: failed to clone upperpath [ 1719.958867][T26921] netlink: 'syz.6.6740': attribute type 10 has an invalid length. [ 1721.099808][T26931] FAULT_INJECTION: forcing a failure. [ 1721.099808][T26931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.146732][T26931] CPU: 1 UID: 0 PID: 26931 Comm: syz.7.6743 Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1721.157633][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1721.167702][T26931] Call Trace: [ 1721.170974][T26931] [ 1721.173894][T26931] dump_stack_lvl+0x241/0x360 [ 1721.178587][T26931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1721.183801][T26931] ? __pfx__printk+0x10/0x10 [ 1721.188402][T26931] ? __pfx_lock_release+0x10/0x10 [ 1721.193447][T26931] should_fail_ex+0x3b0/0x4e0 [ 1721.198133][T26931] _copy_from_user+0x2f/0xc0 [ 1721.202726][T26931] do_sock_getsockopt+0x1d1/0x7e0 [ 1721.207756][T26931] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1721.213295][T26931] ? __fget_files+0x2a/0x410 [ 1721.217885][T26931] ? __fget_files+0x395/0x410 [ 1721.222565][T26931] ? __fget_files+0x2a/0x410 [ 1721.227161][T26931] __x64_sys_getsockopt+0x2a1/0x370 [ 1721.232361][T26931] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1721.238080][T26931] ? do_syscall_64+0x100/0x230 [ 1721.242852][T26931] ? do_syscall_64+0xb6/0x230 [ 1721.247534][T26931] do_syscall_64+0xf3/0x230 [ 1721.252044][T26931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.257943][T26931] RIP: 0033:0x7fae75985d29 [ 1721.262351][T26931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1721.281952][T26931] RSP: 002b:00007fae766d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1721.290362][T26931] RAX: ffffffffffffffda RBX: 00007fae75b75fa0 RCX: 00007fae75985d29 [ 1721.298425][T26931] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 1721.306403][T26931] RBP: 00007fae766d3090 R08: 0000000020001040 R09: 0000000000000000 [ 1721.314367][T26931] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.322340][T26931] R13: 0000000000000000 R14: 00007fae75b75fa0 R15: 00007ffc9573d388 [ 1721.330337][T26931] [ 1721.869664][T15860] libceph: connect (1)[c::]:6789 error -101 [ 1721.891183][T15860] libceph: mon0 (1)[c::]:6789 connect error [ 1722.476698][T26936] ceph: No mds server is up or the cluster is laggy [ 1722.532558][T23922] libceph: connect (1)[c::]:6789 error -101 [ 1722.539199][T23922] libceph: mon0 (1)[c::]:6789 connect error [ 1722.699043][T26944] netlink: 'syz.4.6748': attribute type 10 has an invalid length. [ 1725.186394][T26969] »»»»»» speed is unknown, defaulting to 1000 [ 1725.193580][T26969] lo speed is unknown, defaulting to 1000 [ 1725.200371][T26969] dummy0 speed is unknown, defaulting to 1000 [ 1728.092347][T26969] lo speed is unknown, defaulting to 1000 [ 1728.571353][T26985] sg_write: process 104 (syz.2.6758) changed security contexts after opening file descriptor, this is not allowed. [ 1728.604355][T26985] program syz.2.6758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1729.084567][T26996] 9pnet_fd: Insufficient options for proto=fd [ 1729.695640][T27004] netlink: 'syz.3.6764': attribute type 10 has an invalid length. [ 1729.750718][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.975738][T26693] bond0: (slave bridge0): link status definitely down, disabling slave [ 1729.986864][T26693] bond0: now running without any active interface! [ 1731.148754][T26990] loop2: detected capacity change from 0 to 32768 [ 1731.157539][T26990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6758 (26990) [ 1731.422417][T26990] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1731.825247][T26990] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1732.036831][T26990] BTRFS info (device loop2): using free-space-tree [ 1732.065228][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1732.110191][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1732.371908][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1732.382151][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1732.392184][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1732.418347][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1732.872522][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1734.440406][T27037] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1734.546008][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1734.555768][T26990] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1734.877126][T26990] BTRFS error (device loop2): open_ctree failed [ 1735.046720][T27047] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 1735.209914][T27047] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 1735.336677][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6776'. [ 1735.650899][T27071] netlink: 'syz.4.6781': attribute type 10 has an invalid length. [ 1736.818429][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1737.918497][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 1737.924982][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.945593][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.187781][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1738.233122][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.788817][ T5887] usb 3-1: config 0 descriptor?? [ 1739.086847][T17041] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 1739.107563][ T5887] usb 3-1: can't set config #0, error -71 [ 1739.151025][ T5887] usb 3-1: USB disconnect, device number 7 [ 1739.154944][T27093] »»»»»» speed is unknown, defaulting to 1000 [ 1739.164350][T27093] lo speed is unknown, defaulting to 1000 [ 1739.171640][T27093] dummy0 speed is unknown, defaulting to 1000 [ 1739.345441][T27093] lo speed is unknown, defaulting to 1000 [ 1740.202404][T27113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6793'. [ 1740.244671][T27109] netlink: 'syz.6.6794': attribute type 10 has an invalid length. [ 1743.131460][T17041] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1743.140801][T17041] Bluetooth: hci2: Injecting HCI hardware error event [ 1743.151104][T17041] Bluetooth: hci2: hardware error 0x00 [ 1743.290098][T27137] »»»»»» speed is unknown, defaulting to 1000 [ 1743.470095][T27137] lo speed is unknown, defaulting to 1000 [ 1743.514201][T27144] nfs: Unknown parameter 'a' [ 1743.629983][T27137] dummy0 speed is unknown, defaulting to 1000 [ 1743.803695][T27158] netlink: 'syz.3.6810': attribute type 10 has an invalid length. [ 1743.825597][T27158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6810'. [ 1743.855476][T27158] bridge0: port 1(batadv0) entered blocking state [ 1743.868611][T27158] bridge0: port 1(batadv0) entered disabled state [ 1743.886090][T27160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6810'. [ 1743.980781][T27158] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1744.028080][T27137] lo speed is unknown, defaulting to 1000 [ 1744.321488][T27166] netlink: 256 bytes leftover after parsing attributes in process `syz.7.6811'. [ 1744.408278][T27160] bond0: (slave bridge0): Releasing backup interface [ 1745.178579][T17041] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1748.573335][T27220] »»»»»» speed is unknown, defaulting to 1000 [ 1748.586337][T27220] lo speed is unknown, defaulting to 1000 [ 1748.643561][T27220] dummy0 speed is unknown, defaulting to 1000 [ 1749.306654][T27220] lo speed is unknown, defaulting to 1000 [ 1753.706341][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6835'. [ 1754.421916][T27267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6836'. [ 1755.383791][T27290] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6850'. [ 1755.747834][T27299] netlink: 'syz.7.6853': attribute type 10 has an invalid length. [ 1755.798864][T27299] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6853'. [ 1755.893546][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6853'. [ 1755.949596][T27299] bridge0: port 3(batadv0) entered disabled state [ 1756.363877][T27299] bridge_slave_1: left allmulticast mode [ 1757.148503][T27299] bridge_slave_1: left promiscuous mode [ 1757.154284][T27299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.226402][T27299] bridge_slave_0: left allmulticast mode [ 1757.232419][T27299] bridge_slave_0: left promiscuous mode [ 1757.257843][T27299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.407631][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6857'. [ 1757.693459][T27322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6859'. [ 1757.927820][ T967] libceph: connect (1)[c::]:6789 error -101 [ 1757.968572][ T967] libceph: mon0 (1)[c::]:6789 connect error [ 1758.229369][T27323] ceph: No mds server is up or the cluster is laggy [ 1758.337523][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 1758.345751][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 1758.923828][T27335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6865'. [ 1759.167063][T27342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6863'. [ 1761.201301][T27359] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6874'. [ 1762.210785][T27140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1762.441034][T27140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1762.450456][T27140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1762.459121][T27140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1762.466932][T27140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1762.476758][T27140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1763.268525][T15860] libceph: connect (1)[c::]:6789 error -101 [ 1763.419803][T15860] libceph: mon0 (1)[c::]:6789 connect error [ 1763.440228][T27378] ceph: No mds server is up or the cluster is laggy [ 1763.616218][T27384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6877'. [ 1763.824723][T27362] »»»»»» speed is unknown, defaulting to 1000 [ 1763.832667][T27362] lo speed is unknown, defaulting to 1000 [ 1763.899538][T27362] dummy0 speed is unknown, defaulting to 1000 [ 1764.135816][T27362] lo speed is unknown, defaulting to 1000 [ 1764.273446][T27394] netlink: 'syz.4.6885': attribute type 29 has an invalid length. [ 1764.310170][T27394] netlink: 'syz.4.6885': attribute type 29 has an invalid length. [ 1764.349696][T27394] netlink: 'syz.4.6885': attribute type 29 has an invalid length. [ 1764.355865][T27396] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6882'. [ 1764.379744][T27394] netlink: 'syz.4.6885': attribute type 29 has an invalid length. [ 1764.539391][T17041] Bluetooth: hci1: command tx timeout [ 1764.828735][T27404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6886'. [ 1765.697506][T27407] netlink: 'syz.4.6888': attribute type 10 has an invalid length. [ 1766.146219][T27140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1766.152339][T27362] chnl_net:caif_netlink_parms(): no params data found [ 1766.155251][T27140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1766.169034][T27140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1766.180442][T27140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1766.190093][T27140] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1766.197373][T27140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1766.668699][T17041] Bluetooth: hci1: command tx timeout [ 1766.777869][T27417] »»»»»» speed is unknown, defaulting to 1000 [ 1766.812654][T27362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.843710][T27362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.899474][T27362] bridge_slave_0: entered allmulticast mode [ 1766.914202][T27362] bridge_slave_0: entered promiscuous mode [ 1766.983238][T27417] lo speed is unknown, defaulting to 1000 [ 1767.002877][T27417] dummy0 speed is unknown, defaulting to 1000 [ 1767.093425][T27362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.185264][T27362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.306885][T27362] bridge_slave_1: entered allmulticast mode [ 1767.736080][T27443] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1767.789765][T27362] bridge_slave_1: entered promiscuous mode [ 1768.045146][T27362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.103456][T27417] lo speed is unknown, defaulting to 1000 [ 1768.106285][T27362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.151524][T27437] »»»»»» speed is unknown, defaulting to 1000 [ 1768.169190][T27437] lo speed is unknown, defaulting to 1000 [ 1768.298769][T17041] Bluetooth: hci0: command tx timeout [ 1768.332353][T27437] dummy0 speed is unknown, defaulting to 1000 [ 1768.362469][T27362] team0: Port device team_slave_0 added [ 1768.401355][T27453] netlink: 'syz.4.6898': attribute type 10 has an invalid length. [ 1768.424395][T27362] team0: Port device team_slave_1 added [ 1768.759066][T17041] Bluetooth: hci1: command tx timeout [ 1768.802711][T27362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.810087][T27362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.017046][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 1769.023957][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 1769.178924][T27362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.317024][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 1769.485993][T27460] ceph: No mds server is up or the cluster is laggy [ 1769.515165][T27362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.522198][T27362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.548275][T27362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.626887][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 1769.798745][T27437] lo speed is unknown, defaulting to 1000 [ 1770.119949][T27467] netlink: 'syz.4.6902': attribute type 10 has an invalid length. [ 1770.156839][T27362] hsr_slave_0: entered promiscuous mode [ 1770.176967][T27362] hsr_slave_1: entered promiscuous mode [ 1770.196514][T27362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1770.215513][T27362] Cannot create hsr debugfs directory [ 1770.381659][T17041] Bluetooth: hci0: command tx timeout [ 1770.493581][T15860] libceph: connect (1)[c::]:6789 error -101 [ 1770.499787][T15860] libceph: mon0 (1)[c::]:6789 connect error [ 1770.642779][T27471] ceph: No mds server is up or the cluster is laggy [ 1770.761114][T15860] libceph: connect (1)[c::]:6789 error -101 [ 1770.767178][T15860] libceph: mon0 (1)[c::]:6789 connect error [ 1770.778520][T17041] Bluetooth: hci1: command tx timeout [ 1771.265502][T27417] chnl_net:caif_netlink_parms(): no params data found [ 1771.319595][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6904'. [ 1771.343242][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6904'. [ 1772.462776][T17041] Bluetooth: hci0: command tx timeout [ 1773.859640][T27417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.948910][T27417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.959891][T27417] bridge_slave_0: entered allmulticast mode [ 1773.971541][T27417] bridge_slave_0: entered promiscuous mode [ 1773.996734][T27417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.018854][T27417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.042043][T27417] bridge_slave_1: entered allmulticast mode [ 1774.065993][T27417] bridge_slave_1: entered promiscuous mode [ 1775.018503][T17041] Bluetooth: hci0: command tx timeout [ 1775.072390][T27417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.121753][T27362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1775.145348][T27417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.402141][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 1775.411279][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 1775.751197][T27529] ceph: No mds server is up or the cluster is laggy [ 1775.762977][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 1775.793450][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 1776.278970][T27362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1776.706281][T27417] team0: Port device team_slave_0 added [ 1777.209300][T27362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1777.310711][T27362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1777.364839][T27417] team0: Port device team_slave_1 added [ 1777.999197][T27140] Bluetooth: hci6: command 0x0406 tx timeout [ 1778.860881][T27417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.867863][T27417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1778.921185][T27417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.994165][T27362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.013866][T27362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.048696][T27362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1779.068434][T27362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1779.141886][T27417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1779.152090][T27417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1779.307749][T27417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.570357][T27572] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1780.586360][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.602812][T10211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1780.612863][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.620083][T10211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1780.804974][T27417] hsr_slave_0: entered promiscuous mode [ 1780.846427][T27417] hsr_slave_1: entered promiscuous mode [ 1781.179124][T27417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1781.186729][T27417] Cannot create hsr debugfs directory [ 1782.985274][T27589] »»»»»» speed is unknown, defaulting to 1000 [ 1782.992616][T27589] lo speed is unknown, defaulting to 1000 [ 1782.999811][T27589] dummy0 speed is unknown, defaulting to 1000 [ 1783.123473][T27589] lo speed is unknown, defaulting to 1000 [ 1783.161425][T27596] fuse: Bad value for 'fd' [ 1783.822569][T27362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1783.983665][T27417] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1784.033810][T27417] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1784.057069][T27417] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1784.111972][T27417] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1784.313814][T27417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.443682][T27417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.465400][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.472553][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.564327][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.588571][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.601922][T27613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6942'. [ 1784.602643][T26693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.617937][T26693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.818960][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1784.818982][ T29] audit: type=1326 audit(1736582151.472:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1784.856229][T27417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1784.874556][T27417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1784.904390][ T29] audit: type=1326 audit(1736582151.472:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1784.964323][T27362] veth0_vlan: entered promiscuous mode [ 1784.973587][ T29] audit: type=1326 audit(1736582151.472:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1784.976575][T27362] veth1_vlan: entered promiscuous mode [ 1785.019880][T27362] veth0_macvtap: entered promiscuous mode [ 1785.029092][T27362] veth1_macvtap: entered promiscuous mode [ 1785.044509][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1785.057601][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1785.067604][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1785.078121][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1785.088086][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1785.098759][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1785.111042][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1785.122493][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1785.142435][T27362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1785.156176][ T29] audit: type=1326 audit(1736582151.472:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1785.230747][ T29] audit: type=1326 audit(1736582151.472:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1785.254136][ T29] audit: type=1326 audit(1736582151.472:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1785.281277][ T29] audit: type=1326 audit(1736582151.472:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1785.308093][ T29] audit: type=1326 audit(1736582151.522:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27612 comm="syz.4.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1785.853263][T27632] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1786.024747][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.147777][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.170925][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.194870][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.232642][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.317487][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.371590][T27362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.433182][T27362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.468878][T27362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1786.531910][T27362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.558815][T27362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.594134][T27362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.619772][T27362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.702471][T27645] overlayfs: failed to resolve './file0': -2 [ 1786.721875][T27417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1786.836666][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1786.859279][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.967075][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1786.985252][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1787.412832][T27660] »»»»»» speed is unknown, defaulting to 1000 [ 1787.427558][T27660] lo speed is unknown, defaulting to 1000 [ 1787.441585][T27660] dummy0 speed is unknown, defaulting to 1000 [ 1788.103228][T27660] lo speed is unknown, defaulting to 1000 [ 1789.937845][T27676] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1790.230973][T27678] loop5: detected capacity change from 0 to 1024 [ 1791.156376][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1791.209273][T27417] veth0_vlan: entered promiscuous mode [ 1791.229643][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.269694][T27417] veth1_vlan: entered promiscuous mode [ 1791.324371][T27417] veth0_macvtap: entered promiscuous mode [ 1791.465321][T27417] veth1_macvtap: entered promiscuous mode [ 1791.522482][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.557380][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.572477][T27691] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1791.698754][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.736680][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.786459][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.815613][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.826681][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.837290][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.847215][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.857816][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.870012][T27417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1792.423835][T27696] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1792.629090][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.748407][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.768423][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.804078][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.831551][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.883271][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.933234][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.955639][T27708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6967'. [ 1793.014818][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1793.054778][T27417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1793.076150][T27417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1793.081831][T27711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6969'. [ 1793.096825][T27417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.132030][T27417] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.158412][T27417] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.177292][T27417] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.188407][T27417] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.217935][T27708] macsec1: entered promiscuous mode [ 1793.229121][T27708] macsec1: entered allmulticast mode [ 1793.253973][T27711] macsec1: entered promiscuous mode [ 1793.259919][T27711] macsec1: entered allmulticast mode [ 1793.279183][T27709] md: md2 stopped. [ 1793.543677][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.551930][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.718203][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.748429][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.095741][T27735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6976'. [ 1795.950370][T27742] »»»»»» speed is unknown, defaulting to 1000 [ 1795.957287][T27742] lo speed is unknown, defaulting to 1000 [ 1795.964197][T27742] dummy0 speed is unknown, defaulting to 1000 [ 1796.057885][T27742] lo speed is unknown, defaulting to 1000 [ 1796.561075][T27749] »»»»»» speed is unknown, defaulting to 1000 [ 1796.616414][T27749] lo speed is unknown, defaulting to 1000 [ 1796.672647][T27749] dummy0 speed is unknown, defaulting to 1000 [ 1796.898946][T27140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1796.916722][T27749] lo speed is unknown, defaulting to 1000 [ 1796.978472][T27140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1797.018935][T27140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1797.071766][T27140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1797.079604][T27140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1797.087102][T27140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1797.298576][T27757] »»»»»» speed is unknown, defaulting to 1000 [ 1797.332055][T27757] lo speed is unknown, defaulting to 1000 [ 1797.362533][T27757] dummy0 speed is unknown, defaulting to 1000 [ 1797.679145][T27757] lo speed is unknown, defaulting to 1000 [ 1797.878028][T27774] netlink: 'syz.5.6988': attribute type 10 has an invalid length. [ 1797.924508][T27774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.932104][T27774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.957534][T27774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.964749][T27774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.972232][T27774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.979430][T27774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.035082][T27774] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1799.454653][T27140] Bluetooth: hci4: command tx timeout [ 1799.687309][T27757] chnl_net:caif_netlink_parms(): no params data found [ 1799.741678][T27798] netlink: zone id is out of range [ 1799.754989][T27798] netlink: zone id is out of range [ 1800.079237][T27757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.086404][T27757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.095646][T27757] bridge_slave_0: entered allmulticast mode [ 1800.112691][T27757] bridge_slave_0: entered promiscuous mode [ 1800.215930][T27757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.438753][T27757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.457593][T27757] bridge_slave_1: entered allmulticast mode [ 1801.460333][T27757] bridge_slave_1: entered promiscuous mode [ 1801.534243][T27140] Bluetooth: hci4: command tx timeout [ 1801.626163][ T29] audit: type=1326 audit(1736582168.282:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b2d85d29 code=0x7ffc0000 [ 1801.652975][ T29] audit: type=1326 audit(1736582168.312:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b2d85d29 code=0x7ffc0000 [ 1801.690150][T27825] loop8: detected capacity change from 0 to 128 [ 1801.728929][ T29] audit: type=1326 audit(1736582168.342:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff7b2d85d29 code=0x7ffc0000 [ 1801.815096][ T29] audit: type=1326 audit(1736582168.342:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7b2d85d63 code=0x7ffc0000 [ 1801.944725][T27757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.963384][ T29] audit: type=1326 audit(1736582168.342:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff7b2d847df code=0x7ffc0000 [ 1801.998296][T27825] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1802.000813][T27757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1802.028836][ T29] audit: type=1326 audit(1736582168.342:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff7b2d85db7 code=0x7ffc0000 [ 1802.051713][ T29] audit: type=1326 audit(1736582168.352:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7b2d84690 code=0x7ffc0000 [ 1802.074200][T27825] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1802.084878][ T29] audit: type=1326 audit(1736582168.352:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b2d8592b code=0x7ffc0000 [ 1802.209389][ T29] audit: type=1326 audit(1736582168.412:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff7b2d8498a code=0x7ffc0000 [ 1802.289577][T27826] 9pnet_fd: Insufficient options for proto=fd [ 1802.337716][ T29] audit: type=1326 audit(1736582168.412:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27824 comm="syz.8.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff7b2d8498a code=0x7ffc0000 [ 1802.362078][T27825] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7004'. [ 1802.876137][T27757] team0: Port device team_slave_0 added [ 1802.910966][T27757] team0: Port device team_slave_1 added [ 1803.047289][T27757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1803.075926][T27757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1803.144839][T27757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1803.168816][T27757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1803.175789][T27757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1803.210665][T27757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.325243][T27417] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1803.406873][T27757] hsr_slave_0: entered promiscuous mode [ 1803.460300][T27757] hsr_slave_1: entered promiscuous mode [ 1803.529518][T27757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1803.547727][T27757] Cannot create hsr debugfs directory [ 1803.578976][T27140] Bluetooth: hci4: command tx timeout [ 1803.875165][T27857] vlan0: entered promiscuous mode [ 1804.139492][T27857] bond0: entered promiscuous mode [ 1804.144573][T27857] syz_tun: entered promiscuous mode [ 1804.472760][T27865] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1804.764443][T27857] bond0: left promiscuous mode [ 1804.808676][T27857] syz_tun: left promiscuous mode [ 1805.363995][T27869] »»»»»» speed is unknown, defaulting to 1000 [ 1805.570340][T27757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.658616][T27140] Bluetooth: hci4: command tx timeout [ 1805.728672][T27869] lo speed is unknown, defaulting to 1000 [ 1805.735517][T27869] dummy0 speed is unknown, defaulting to 1000 [ 1805.820436][T27757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.893677][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7020'. [ 1805.958654][T27884] overlay: Unknown parameter 'permit_directio' [ 1806.798651][T27757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.010261][T27869] lo speed is unknown, defaulting to 1000 [ 1807.169477][T27890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7025'. [ 1807.221807][T27757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.269461][T27898] loop8: detected capacity change from 0 to 4096 [ 1807.276734][T27898] ntfs3: Bad value for 'dmask' [ 1807.332756][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1807.332778][ T29] audit: type=1326 audit(1736582173.942:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27889 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cabd85d29 code=0x7ffc0000 [ 1807.363462][ T29] audit: type=1326 audit(1736582173.992:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27889 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cabd85d29 code=0x7ffc0000 [ 1807.386037][ T29] audit: type=1326 audit(1736582173.992:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27889 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cabd85d29 code=0x7ffc0000 [ 1807.408670][ T29] audit: type=1326 audit(1736582173.992:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27889 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cabd85d29 code=0x7ffc0000 [ 1810.005672][T27757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1810.062759][T27757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1810.144397][T27757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1810.198100][T27757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1811.202682][T27757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.247743][T27757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.323814][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7039'. [ 1811.521178][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.528363][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.636178][T27757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1811.686665][T27757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1811.712067][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'. [ 1811.725942][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.733074][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.793646][ T29] audit: type=1326 audit(1736582178.452:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27945 comm="syz.4.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1811.890167][ T29] audit: type=1326 audit(1736582178.472:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27945 comm="syz.4.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1812.003828][ T29] audit: type=1326 audit(1736582178.472:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27945 comm="syz.4.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1812.049728][ T29] audit: type=1326 audit(1736582178.472:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27945 comm="syz.4.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1812.118609][ T29] audit: type=1326 audit(1736582178.472:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27945 comm="syz.4.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae985d29 code=0x7ffc0000 [ 1812.396164][T27757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.614848][T27757] veth0_vlan: entered promiscuous mode [ 1812.913873][T27757] veth1_vlan: entered promiscuous mode [ 1813.081707][T27757] veth0_macvtap: entered promiscuous mode [ 1813.136183][T27757] veth1_macvtap: entered promiscuous mode [ 1813.176494][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1813.187515][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.197526][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1813.208052][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.218001][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1813.834633][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.897594][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1813.960552][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.078585][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.089174][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.138453][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.202770][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.270253][T27757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.293955][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1814.311117][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.328262][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1814.560726][T23922] libceph: connect (1)[c::]:6789 error -101 [ 1814.569083][T23922] libceph: mon0 (1)[c::]:6789 connect error [ 1814.881356][T27992] ceph: No mds server is up or the cluster is laggy [ 1814.929743][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.945222][T27996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1814.975614][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1814.996574][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.099056][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.119216][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.162277][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.174246][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7060'. [ 1815.235026][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.242813][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 1815.251634][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 1815.271082][T28003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7058'. [ 1815.280142][ T29] audit: type=1326 audit(1736582181.942:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27990 comm="syz.5.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1815.285550][T27757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.313752][T27757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.394124][ T29] audit: type=1326 audit(1736582181.962:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27990 comm="syz.5.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1815.425915][T27757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.135527][ T29] audit: type=1326 audit(1736582181.962:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27990 comm="syz.5.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1816.236393][T27757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.276042][ T29] audit: type=1326 audit(1736582181.962:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27990 comm="syz.5.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1816.337182][T27757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.366591][T27757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.450214][T27757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.603946][ T6208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.657049][ T6208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1818.711740][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1818.868489][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.928682][T28048] FAULT_INJECTION: forcing a failure. [ 1819.928682][T28048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1819.997373][T28048] CPU: 0 UID: 0 PID: 28048 Comm: syz.3.6977 Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1820.008201][T28048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1820.018273][T28048] Call Trace: [ 1820.021563][T28048] [ 1820.024513][T28048] dump_stack_lvl+0x241/0x360 [ 1820.029235][T28048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1820.034637][T28048] ? __pfx__printk+0x10/0x10 [ 1820.039266][T28048] ? snprintf+0xda/0x120 [ 1820.043546][T28048] should_fail_ex+0x3b0/0x4e0 [ 1820.048351][T28048] _copy_to_user+0x31/0xb0 [ 1820.052804][T28048] simple_read_from_buffer+0xca/0x150 [ 1820.058208][T28048] proc_fail_nth_read+0x1e9/0x250 [ 1820.063264][T28048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1820.068839][T28048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.074493][T28048] ? rw_verify_area+0x55e/0x6f0 [ 1820.079365][T28048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1820.084937][T28048] vfs_read+0x1fe/0xb70 [ 1820.089124][T28048] ? __pfx___mutex_lock+0x10/0x10 [ 1820.094183][T28048] ? __pfx_vfs_read+0x10/0x10 [ 1820.098887][T28048] ? __fget_files+0x2a/0x410 [ 1820.104000][T28048] ? __fget_files+0x395/0x410 [ 1820.108706][T28048] ? __fget_files+0x2a/0x410 [ 1820.113333][T28048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.118993][T28048] ksys_read+0x18f/0x2b0 [ 1820.123258][T28048] ? __pfx_ksys_read+0x10/0x10 [ 1820.128051][T28048] ? do_syscall_64+0x100/0x230 [ 1820.132857][T28048] ? do_syscall_64+0xb6/0x230 [ 1820.137576][T28048] do_syscall_64+0xf3/0x230 [ 1820.142123][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.148050][T28048] RIP: 0033:0x7fe428d8473c [ 1820.152481][T28048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1820.172104][T28048] RSP: 002b:00007fe429b27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1820.180534][T28048] RAX: ffffffffffffffda RBX: 00007fe428f76080 RCX: 00007fe428d8473c [ 1820.188513][T28048] RDX: 000000000000000f RSI: 00007fe429b270a0 RDI: 0000000000000003 [ 1820.196491][T28048] RBP: 00007fe429b27090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.204467][T28048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.212441][T28048] R13: 0000000000000001 R14: 00007fe428f76080 R15: 00007ffcd64c6a08 [ 1820.220432][T28048] [ 1820.474694][T28053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1820.598076][T28057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7076'. [ 1820.610577][ T29] audit: type=1326 audit(1736582187.272:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.5.7076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1820.646898][ T29] audit: type=1326 audit(1736582187.272:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.5.7076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1820.777965][ T29] audit: type=1326 audit(1736582187.272:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.5.7076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1820.898621][ T29] audit: type=1326 audit(1736582187.272:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.5.7076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3b85d29 code=0x7ffc0000 [ 1820.982852][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 1820.989189][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 1821.052726][T28068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7077'. [ 1821.254170][T28065] ceph: No mds server is up or the cluster is laggy [ 1821.329858][T27588] libceph: connect (1)[c::]:6789 error -101 [ 1821.335926][T27588] libceph: mon0 (1)[c::]:6789 connect error [ 1823.068173][T28085] raw_sendmsg: syz.8.7082 forgot to set AF_INET. Fix it! [ 1824.749249][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1825.313150][T28120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1826.166804][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7098'. [ 1827.768935][ T29] audit: type=1326 audit(1736582194.432:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28159 comm="syz.8.7109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7b2d85d29 code=0x0 [ 1827.973185][T28166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7108'. [ 1827.986629][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 1827.992786][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 1828.028678][T28141] ceph: No mds server is up or the cluster is laggy [ 1828.365042][T28171] »»»»»» speed is unknown, defaulting to 1000 [ 1828.372381][T28171] lo speed is unknown, defaulting to 1000 [ 1828.379430][T28171] dummy0 speed is unknown, defaulting to 1000 [ 1828.524736][T28171] lo speed is unknown, defaulting to 1000 [ 1828.680690][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 1828.686830][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 1828.969437][T28177] netlink: 256 bytes leftover after parsing attributes in process `syz.8.7111'. [ 1829.470864][T28183] »»»»»» speed is unknown, defaulting to 1000 [ 1829.481680][T28183] lo speed is unknown, defaulting to 1000 [ 1829.499066][T28183] dummy0 speed is unknown, defaulting to 1000 [ 1830.012840][T28183] lo speed is unknown, defaulting to 1000 [ 1832.163154][T28205] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1832.984578][T28207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7119'. [ 1833.096126][ T29] audit: type=1326 audit(1736582199.742:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28206 comm="syz.8.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b2d85d29 code=0x7ffc0000 [ 1833.178426][ T29] audit: type=1326 audit(1736582199.742:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28206 comm="syz.8.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff7b2d85d29 code=0x7ffc0000 [ 1833.314220][ T29] audit: type=1326 audit(1736582199.742:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28206 comm="syz.8.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b2d85d29 code=0x7ffc0000 [ 1833.384126][ T29] audit: type=1326 audit(1736582199.742:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28206 comm="syz.8.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b2d85d29 code=0x7ffc0000 [ 1833.597146][T28226] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1833.970951][T28219] »»»»»» speed is unknown, defaulting to 1000 [ 1834.040743][T28219] lo speed is unknown, defaulting to 1000 [ 1834.152483][T28219] dummy0 speed is unknown, defaulting to 1000 [ 1836.676275][T28219] lo speed is unknown, defaulting to 1000 [ 1837.217788][T28253] vlan2: entered promiscuous mode [ 1837.323144][T28253] bond0: entered promiscuous mode [ 1837.328235][T28253] bond_slave_0: entered promiscuous mode [ 1837.400898][T28253] bond_slave_1: entered promiscuous mode [ 1837.466306][T28253] bond0: left promiscuous mode [ 1837.473156][T28265] tmpfs: Unknown parameter 'ªg'Pç¿ÑÔ§žŠx' [ 1837.504406][T28253] bond_slave_0: left promiscuous mode [ 1837.529729][T28253] bond_slave_1: left promiscuous mode [ 1838.621633][T28287] netlink: 'syz.8.7141': attribute type 10 has an invalid length. [ 1838.635403][T28289] Invalid ELF header type: 2 != 1 [ 1838.667581][T28287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.675082][T28287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.738869][T28287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.746056][T28287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.753526][T28287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.760672][T28287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.782045][T28287] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1839.051925][T28300] netlink: 'syz.6.7147': attribute type 10 has an invalid length. [ 1839.502845][T28312] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7151'. [ 1839.554973][T28312] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7151'. [ 1839.633722][T28316] rdma_rxe: rxe_newlink: failed to add lo [ 1839.646304][T28316] siw: device registration error -23 [ 1839.701995][T28313] vlan2: entered promiscuous mode [ 1839.707817][T28313] bond0: entered promiscuous mode [ 1839.733282][T28313] bond_slave_0: entered promiscuous mode [ 1839.764184][T28313] bond_slave_1: entered promiscuous mode [ 1840.095480][T28313] bond0: left promiscuous mode [ 1840.100534][T28313] bond_slave_0: left promiscuous mode [ 1840.138694][T28313] bond_slave_1: left promiscuous mode [ 1840.817952][T28348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1842.432231][T28361] »»»»»» speed is unknown, defaulting to 1000 [ 1842.439703][T28361] lo speed is unknown, defaulting to 1000 [ 1842.446448][T28361] dummy0 speed is unknown, defaulting to 1000 [ 1842.509952][T28366] bond0: entered promiscuous mode [ 1842.529019][T28366] bond_slave_0: entered promiscuous mode [ 1842.534846][T28366] bond_slave_1: entered promiscuous mode [ 1842.584125][T28366] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1842.602294][T28366] Cannot create hsr debugfs directory [ 1842.620032][T28366] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1842.645906][T28361] lo speed is unknown, defaulting to 1000 [ 1842.795643][T23922] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1843.228460][T23922] usb 4-1: Using ep0 maxpacket: 32 [ 1843.333758][T23922] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 1843.342299][T23922] usb 4-1: config 0 has no interface number 1 [ 1843.370831][T23922] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1843.386874][T28376] ceph: No mds server is up or the cluster is laggy [ 1843.394303][T15860] libceph: connect (1)[c::]:6789 error -101 [ 1843.400505][T15860] libceph: mon0 (1)[c::]:6789 connect error [ 1843.456210][T23922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.513746][T23922] usb 4-1: Product: syz [ 1843.558703][T23922] usb 4-1: Manufacturer: syz [ 1843.610643][T23922] usb 4-1: SerialNumber: syz [ 1843.795800][T23922] usb 4-1: config 0 descriptor?? [ 1845.561155][T28357] loop3: detected capacity change from 0 to 4096 [ 1846.218138][T28408] »»»»»» speed is unknown, defaulting to 1000 [ 1846.230057][T28408] lo speed is unknown, defaulting to 1000 [ 1846.242009][T28408] dummy0 speed is unknown, defaulting to 1000 [ 1846.790009][T28408] lo speed is unknown, defaulting to 1000 [ 1848.187601][T28357] ntfs3(loop3): Failed to read $UpCase (-4). [ 1848.688572][T23922] usb 4-1: Could not set interface, error -71 [ 1848.700640][T23922] usb 4-1: USB disconnect, device number 7 [ 1851.200400][T28433] netlink: 'syz.4.7191': attribute type 1 has an invalid length. [ 1851.673463][T28449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.932630][T23567] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1851.967962][T28453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1851.977845][T28453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1852.151798][T23567] usb 4-1: config 0 has no interfaces? [ 1852.157592][T23567] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1852.170374][T23567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.202112][T23567] usb 4-1: config 0 descriptor?? [ 1852.446794][T28440] vlan2: entered promiscuous mode [ 1852.496056][T28440] bond0: entered promiscuous mode [ 1852.552785][T28440] bond_slave_0: entered promiscuous mode [ 1852.559164][T28440] bond_slave_1: entered promiscuous mode [ 1852.663361][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.779443][T28440] bond0: left promiscuous mode [ 1852.784386][T28440] bond_slave_0: left promiscuous mode [ 1852.790566][T28440] bond_slave_1: left promiscuous mode [ 1852.867167][T15860] usb 4-1: USB disconnect, device number 8 [ 1853.264892][T28472] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7201'. [ 1853.318623][T28472] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7201'. [ 1853.382679][T27140] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 1853.382767][T27140] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 1854.769041][T28481] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7206'. [ 1854.878040][T28493] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7207'. [ 1856.811388][T28511] »»»»»» speed is unknown, defaulting to 1000 [ 1857.230083][T28511] lo speed is unknown, defaulting to 1000 [ 1857.237927][T28511] dummy0 speed is unknown, defaulting to 1000 [ 1857.280380][T28514] netlink: 'syz.6.7214': attribute type 10 has an invalid length. [ 1858.695747][T28511] lo speed is unknown, defaulting to 1000 [ 1858.816843][T28524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7217'. [ 1859.477114][T28532] vlan2: entered promiscuous mode [ 1860.030512][T28550] netlink: 'syz.6.7223': attribute type 1 has an invalid length. [ 1861.075122][T28560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7221'. [ 1861.167284][T28559] vlan2: entered promiscuous mode [ 1861.173349][T28559] bond0: entered promiscuous mode [ 1861.178760][T28559] bond_slave_0: entered promiscuous mode [ 1861.184630][T28559] bond_slave_1: entered promiscuous mode [ 1861.191081][T28559] bridge0: entered promiscuous mode [ 1861.321596][T28559] bond0: left promiscuous mode [ 1861.326425][T28559] bond_slave_0: left promiscuous mode [ 1861.336410][T28559] bond_slave_1: left promiscuous mode [ 1861.347694][T28559] bridge0: left promiscuous mode [ 1861.684489][T28570] netlink: 'syz.5.7229': attribute type 10 has an invalid length. [ 1861.740181][T28570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.747462][T28570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.774252][T26693] bond0: (slave bridge0): link status definitely down, disabling slave [ 1862.611457][T28580] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1863.671358][T28590] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1865.465536][T28606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7239'. [ 1865.522502][T28608] loop3: detected capacity change from 0 to 64 [ 1866.573172][T28628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7249'. [ 1868.135035][T28645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7251'. [ 1869.294590][T27140] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 1869.294631][T27140] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 1869.654051][T28664] netlink: 'syz.2.7260': attribute type 1 has an invalid length. [ 1869.739108][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7261'. [ 1870.029662][T28660] »»»»»» speed is unknown, defaulting to 1000 [ 1870.036753][T28660] lo speed is unknown, defaulting to 1000 [ 1870.630091][T28660] dummy0 speed is unknown, defaulting to 1000 [ 1871.159141][T28686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1871.951393][T28660] lo speed is unknown, defaulting to 1000 [ 1872.003120][T28697] loop3: detected capacity change from 0 to 512 [ 1872.198381][T28697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1872.206474][T28697] System zones: 0-2, 18-18, 34-34 [ 1872.217640][T28697] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7272: bg 0: block 248: padding at end of block bitmap is not set [ 1872.233857][T28697] Quota error (device loop3): write_blk: dquota write failed [ 1872.241390][T28697] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1872.251781][T28697] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.7272: Failed to acquire dquot type 1 [ 1872.280989][T28697] EXT4-fs (loop3): 1 truncate cleaned up [ 1872.287634][T28697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1872.312809][T28697] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1872.439798][T27140] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 1872.439887][T27140] Bluetooth: hci4: Unknown advertising packet type: 0x17 [ 1872.447355][T27140] Bluetooth: hci4: Unknown advertising packet type: 0x1d [ 1872.454701][T27140] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1872.975129][T27757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.847282][T28718] vlan2: entered promiscuous mode [ 1875.756606][T28741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7286'. [ 1876.430541][T27140] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1876.516598][T28765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.822996][T28793] »»»»»» speed is unknown, defaulting to 1000 [ 1878.830186][T28793] lo speed is unknown, defaulting to 1000 [ 1878.836907][T28793] dummy0 speed is unknown, defaulting to 1000 [ 1878.920705][T28804] netlink: 'syz.8.7307': attribute type 1 has an invalid length. [ 1878.974402][T28793] lo speed is unknown, defaulting to 1000 [ 1879.030015][T28801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7306'. [ 1879.270741][T28815] loop3: detected capacity change from 0 to 512 [ 1879.293292][T28815] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1879.308493][T28815] System zones: 0-2, 18-18, 34-34 [ 1880.481383][T28815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7311: bg 0: block 248: padding at end of block bitmap is not set [ 1880.523440][T28815] Quota error (device loop3): write_blk: dquota write failed [ 1880.532212][T28815] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1880.542608][T28815] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.7311: Failed to acquire dquot type 1 [ 1880.692246][T28815] EXT4-fs (loop3): 1 truncate cleaned up [ 1880.776941][T28815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.863846][T28815] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1880.988211][T27140] Bluetooth: hci4: Unknown advertising packet type: 0x16 [ 1880.988252][T27140] Bluetooth: hci4: Unknown advertising packet type: 0x1c [ 1881.006023][T27140] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1881.201204][T27757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.283802][T28850] netlink: 'syz.5.7325': attribute type 1 has an invalid length. [ 1881.490479][T28848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7322'. [ 1881.940367][T28870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1882.243445][T28873] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7331'. [ 1882.253063][T28873] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7331'. [ 1882.321049][T28873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7331'. [ 1883.200221][T28882] overlayfs: failed to clone upperpath [ 1883.394140][T17043] libceph: connect (1)[c::]:6789 error -101 [ 1883.400835][T17043] libceph: mon0 (1)[c::]:6789 connect error [ 1883.426011][T17041] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 1883.426047][T17041] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 1883.632589][T28889] ceph: No mds server is up or the cluster is laggy [ 1883.670593][T28897] netlink: 'syz.4.7340': attribute type 10 has an invalid length. [ 1883.679701][T17043] libceph: connect (1)[c::]:6789 error -101 [ 1883.685745][T17043] libceph: mon0 (1)[c::]:6789 connect error [ 1885.042940][T28905] vlan2: entered promiscuous mode [ 1885.068523][T28905] bond0: entered promiscuous mode [ 1885.077923][T28905] bond_slave_0: entered promiscuous mode [ 1885.088159][T28905] bond_slave_1: entered promiscuous mode [ 1885.101057][T28905] bond0: left promiscuous mode [ 1885.105844][T28905] bond_slave_0: left promiscuous mode [ 1885.263488][T28924] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7346'. [ 1885.333145][T28905] bond_slave_1: left promiscuous mode [ 1885.394377][T28920] (unnamed net_device) (uninitialized): option use_carrier: invalid value (9) [ 1885.422168][T17041] Bluetooth: hci1: command 0x0406 tx timeout [ 1885.880899][T27140] Bluetooth: hci6: Unknown advertising packet type: 0x14 [ 1885.880983][T27140] Bluetooth: hci6: Unknown advertising packet type: 0x20 [ 1886.251949][T28941] FAULT_INJECTION: forcing a failure. [ 1886.251949][T28941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.974448][T28941] CPU: 1 UID: 0 PID: 28941 Comm: syz.3.7352 Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1886.985282][T28941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1886.995350][T28941] Call Trace: [ 1886.998641][T28941] [ 1887.001583][T28941] dump_stack_lvl+0x241/0x360 [ 1887.006308][T28941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1887.011628][T28941] ? __pfx__printk+0x10/0x10 [ 1887.016249][T28941] ? __pfx_lock_release+0x10/0x10 [ 1887.021308][T28941] should_fail_ex+0x3b0/0x4e0 [ 1887.026027][T28941] _copy_from_user+0x2f/0xc0 [ 1887.030649][T28941] copy_msghdr_from_user+0xae/0x680 [ 1887.035884][T28941] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1887.041716][T28941] ? __fget_files+0x2a/0x410 [ 1887.046336][T28941] ? __fget_files+0x2a/0x410 [ 1887.050965][T28941] __sys_sendmsg+0x209/0x350 [ 1887.055581][T28941] ? __pfx_lock_release+0x10/0x10 [ 1887.060632][T28941] ? __pfx___sys_sendmsg+0x10/0x10 [ 1887.065779][T28941] ? __pfx_vfs_write+0x10/0x10 [ 1887.070599][T28941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1887.076953][T28941] ? do_syscall_64+0x100/0x230 [ 1887.081754][T28941] ? do_syscall_64+0xb6/0x230 [ 1887.086466][T28941] do_syscall_64+0xf3/0x230 [ 1887.091003][T28941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.096926][T28941] RIP: 0033:0x7fe428d85d29 [ 1887.101356][T28941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1887.120981][T28941] RSP: 002b:00007fe429b06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1887.129431][T28941] RAX: ffffffffffffffda RBX: 00007fe428f76160 RCX: 00007fe428d85d29 [ 1887.137420][T28941] RDX: 0000000020000004 RSI: 0000000020000e40 RDI: 0000000000000007 [ 1887.145407][T28941] RBP: 00007fe429b06090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.153397][T28941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.161388][T28941] R13: 0000000000000000 R14: 00007fe428f76160 R15: 00007ffcd64c6a08 [ 1887.169398][T28941] [ 1887.182832][T28921] overlayfs: failed to clone lowerpath [ 1890.460240][T11369] libceph: connect (1)[c::]:6789 error -101 [ 1890.466324][T11369] libceph: mon0 (1)[c::]:6789 connect error [ 1890.551783][T17041] Bluetooth: hci0: command 0x0406 tx timeout [ 1890.738268][T17043] libceph: connect (1)[c::]:6789 error -101 [ 1890.744660][T17043] libceph: mon0 (1)[c::]:6789 connect error [ 1890.820129][T28971] ceph: No mds server is up or the cluster is laggy [ 1891.092362][T28981] syz.3.7362: attempt to access beyond end of device [ 1891.092362][T28981] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1891.157306][T28981] SQUASHFS error: Failed to read block 0x0: -5 [ 1891.164522][T28981] unable to read squashfs_super_block [ 1891.410287][T11369] libceph: connect (1)[c::]:6789 error -101 [ 1891.417362][T11369] libceph: mon0 (1)[c::]:6789 connect error [ 1891.683495][T11369] libceph: connect (1)[c::]:6789 error -101 [ 1891.978946][T28985] ceph: No mds server is up or the cluster is laggy [ 1892.018742][T11369] libceph: mon0 (1)[c::]:6789 connect error [ 1893.514843][T29005] netlink: 'syz.5.7371': attribute type 10 has an invalid length. [ 1893.532189][T29001] netlink: 'syz.4.7368': attribute type 10 has an invalid length. [ 1893.582562][T29008] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7369'. [ 1893.878499][T11369] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1894.000561][T17043] libceph: connect (1)[c::]:6789 error -101 [ 1894.007492][T17043] libceph: mon0 (1)[c::]:6789 connect error [ 1894.070488][T11369] usb 4-1: config 4 has an invalid interface number: 119 but max is 0 [ 1894.084195][T11369] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.136694][T11369] usb 4-1: config 4 has no interface number 0 [ 1894.167041][T11369] usb 4-1: config 4 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1894.205644][T11369] usb 4-1: config 4 interface 119 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 1894.271975][T11369] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a7.2d [ 1894.286804][T17043] libceph: connect (1)[c::]:6789 error -101 [ 1894.295269][T17043] libceph: mon0 (1)[c::]:6789 connect error [ 1894.301462][T11369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.343068][T11369] usb 4-1: Product: syz [ 1894.347338][T11369] usb 4-1: Manufacturer: syz [ 1894.358338][T11369] usb 4-1: SerialNumber: syz [ 1894.390346][T11369] pn533_usb 4-1:4.119: NFC: Could not find bulk-in or bulk-out endpoint [ 1894.516901][T29023] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7375'. [ 1894.533883][T29016] ceph: No mds server is up or the cluster is laggy [ 1894.604424][T17043] usb 4-1: USB disconnect, device number 9 [ 1894.848805][T29030] netlink: 'syz.5.7378': attribute type 10 has an invalid length. [ 1896.883966][T29049] netlink: 'syz.4.7385': attribute type 10 has an invalid length. [ 1899.519602][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7388'. [ 1899.579046][T29074] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7391'. [ 1899.920337][T29081] loop3: detected capacity change from 0 to 4096 [ 1899.927430][T29081] nilfs2: Unknown parameter '' [ 1899.954201][T29081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7393'. [ 1899.985507][T17041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1899.995498][T17041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1900.129148][ T6208] [ 1900.129165][T16678] ------------[ cut here ]------------ [ 1900.129176][T16678] DEBUG_LOCKS_WARN_ON(!test_bit(class_idx, lock_classes_in_use)) [ 1900.131488][ T6208] ============================= [ 1900.137005][T16678] WARNING: CPU: 1 PID: 16678 at kernel/locking/lockdep.c:5196 __lock_acquire+0x165b/0x2100 [ 1900.144666][ T6208] WARNING: suspicious RCU usage [ 1900.149404][T16678] Modules linked in: [ 1900.149424][T16678] CPU: 1 UID: 0 PID: 16678 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1900.149454][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1900.149471][T16678] RIP: 0010:__lock_acquire+0x165b/0x2100 [ 1900.149505][T16678] Code: 0f b6 04 08 84 c0 0f 85 31 0a 00 00 83 3d f0 d9 9e 0e 00 75 19 90 48 c7 c7 80 97 0a 8c 48 c7 c6 60 c0 0a 8c e8 76 4c e5 ff 90 <0f> 0b 90 90 90 e9 be fd ff ff 90 0f 0b 90 e9 16 fd ff ff 90 e8 5c [ 1900.159596][ T6208] 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 Not tainted [ 1900.164249][T16678] RSP: 0018:ffffc90003d0f0f0 EFLAGS: 00010046 [ 1900.168112][ T6208] ----------------------------- [ 1900.179001][T16678] [ 1900.179010][T16678] RAX: b72f87a4a9175900 RBX: 000000000b346abc RCX: ffff888044bf3c00 [ 1900.179030][T16678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1900.179048][T16678] RBP: ffff888044bf4708 R08: ffffffff81602a82 R09: 1ffffffff2033056 [ 1900.179069][T16678] R10: dffffc0000000000 R11: fffffbfff2033057 R12: ffff888044bf46c4 [ 1900.189141][ T6208] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 1900.194696][T16678] R13: ffff888044bf3c00 R14: 0000000000000000 R15: ffff888044bf4728 [ 1900.214854][ T6208] [ 1900.214854][ T6208] other info that might help us debug this: [ 1900.214854][ T6208] [ 1900.221428][T16678] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1900.221453][T16678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1900.221473][T16678] CR2: 0000001b32b1aff8 CR3: 0000000053d80000 CR4: 0000000000350ef0 [ 1900.221495][T16678] Call Trace: [ 1900.221505][T16678] [ 1900.221518][T16678] ? __warn+0x165/0x4d0 [ 1900.221554][T16678] ? __lock_acquire+0x165b/0x2100 [ 1900.221586][T16678] ? report_bug+0x2b3/0x500 [ 1900.221623][T16678] ? __lock_acquire+0x165b/0x2100 [ 1900.221656][T16678] ? handle_bug+0x60/0x90 [ 1900.221683][T16678] ? exc_invalid_op+0x1a/0x50 [ 1900.221708][T16678] ? asm_exc_invalid_op+0x1a/0x20 [ 1900.221751][T16678] ? __warn_printk+0x292/0x360 [ 1900.221786][T16678] ? __lock_acquire+0x165b/0x2100 [ 1900.221828][T16678] lock_acquire+0x1ed/0x550 [ 1900.221858][T16678] ? down+0x39/0xc0 [ 1900.221897][T16678] ? ib_device_get_by_netdev+0x85/0x5e0 [ 1900.221934][T16678] ? __pfx_lock_acquire+0x10/0x10 [ 1900.221966][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.221997][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.222028][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.222059][T16678] _raw_spin_lock_irqsave+0xd5/0x120 [ 1900.222093][T16678] ? down+0x39/0xc0 [ 1900.222130][T16678] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1900.222163][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.222194][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.222226][T16678] down+0x39/0xc0 [ 1900.222265][T16678] __dev_close_many+0x107/0x300 [ 1900.222311][T16678] ? __pfx___dev_close_many+0x10/0x10 [ 1900.222351][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.222379][T16678] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1900.229412][ T6208] [ 1900.229412][ T6208] rcu_scheduler_active = 2, debug_locks = 1 [ 1900.233331][T16678] dev_close_many+0x24e/0x4c0 [ 1900.235624][ T6208] 3 locks held by kworker/u8:10/6208: [ 1900.243570][T16678] ? __pfx_dev_close_many+0x10/0x10 [ 1900.243606][T16678] ? try_to_wake_up+0x959/0x1470 [ 1900.243644][T16678] unregister_netdevice_many_notify+0x530/0x1da0 [ 1900.243681][T16678] ? __queue_work+0x199/0xf50 [ 1900.243710][T16678] ? __pfx_lock_release+0x10/0x10 [ 1900.243741][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.243773][T16678] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1900.243809][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.243837][T16678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1900.251925][ T6208] #0: [ 1900.259818][T16678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1900.259859][T16678] ? __queue_work+0x199/0xf50 [ 1900.267794][ T6208] ffff88804c54f948 [ 1900.276514][T16678] ? mod_delayed_work_on+0x1ae/0x370 [ 1900.276548][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.276576][T16678] ? lockdep_hardirqs_on+0x99/0x150 [ 1900.284563][ T6208] ( [ 1900.294714][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.294751][T16678] unregister_netdevice_queue+0x303/0x370 [ 1900.303926][ T6208] (wq_completion)bond0 [ 1900.310200][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.310237][T16678] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1900.310267][T16678] ? linkwatch_urgent_event+0x2b5/0x450 [ 1900.310299][T16678] __tun_detach+0x6b9/0x1600 [ 1900.319289][ T6208] #11 [ 1900.321538][T16678] tun_chr_close+0x105/0x1b0 [ 1900.324431][ T6208] ){+.+.}-{0:0} [ 1900.328552][T16678] ? __pfx_tun_chr_close+0x10/0x10 [ 1900.328590][T16678] __fput+0x23e/0xa50 [ 1900.328635][T16678] task_work_run+0x251/0x310 [ 1900.328674][T16678] ? __pfx_task_work_run+0x10/0x10 [ 1900.328707][T16678] ? do_exit+0xa25/0x28e0 [ 1900.328737][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.328767][T16678] ? do_exit+0xa25/0x28e0 [ 1900.328799][T16678] do_exit+0xa2a/0x28e0 [ 1900.328834][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.328863][T16678] ? __pfx_do_exit+0x10/0x10 [ 1900.328894][T16678] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1900.328923][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.328952][T16678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1900.328986][T16678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1900.329017][T16678] ? _raw_spin_lock_irq+0xdf/0x120 [ 1900.329055][T16678] do_group_exit+0x207/0x2c0 [ 1900.329086][T16678] ? _raw_spin_unlock_irq+0x23/0x50 [ 1900.329119][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.329147][T16678] ? lockdep_hardirqs_on+0x99/0x150 [ 1900.329188][T16678] get_signal+0x16b2/0x1750 [ 1900.329236][T16678] ? __pfx_get_signal+0x10/0x10 [ 1900.329280][T16678] arch_do_signal_or_restart+0x96/0x860 [ 1900.329331][T16678] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1900.329371][T16678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1900.329410][T16678] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1900.334434][ T6208] , at: process_scheduled_works+0x93b/0x1840 [ 1900.338905][T16678] syscall_exit_to_user_mode+0xce/0x340 [ 1900.338949][T16678] do_syscall_64+0x100/0x230 [ 1900.343942][ T6208] #1: ffffc90005097d00 [ 1900.348238][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.352925][ T6208] ( [ 1900.357860][T16678] RIP: 0033:0x7f65ae98473c [ 1900.362647][ T6208] (work_completion)(&(&bond->mii_work)->work) [ 1900.367576][T16678] Code: Unable to access opcode bytes at 0x7f65ae984712. [ 1900.372079][ T6208] ){+.+.}-{0:0} [ 1900.375814][T16678] RSP: 002b:00007ffcbc13d200 EFLAGS: 00000246 [ 1900.381569][ T6208] , at: process_scheduled_works+0x976/0x1840 [ 1900.386317][T16678] ORIG_RAX: 0000000000000000 [ 1900.391990][ T6208] #2: [ 1900.397517][T16678] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007f65ae98473c [ 1900.403152][ T6208] ffffffff8e937ae0 [ 1900.408359][T16678] RDX: 0000000000000030 RSI: 00007ffcbc13d2b0 RDI: 00000000000000f9 [ 1900.408380][T16678] RBP: 00007ffcbc13d25c R08: 0000000000000000 R09: 0079746972756365 [ 1900.408401][T16678] R10: 00007f65aeb487e0 R11: 0000000000000246 R12: 0000000000000032 [ 1900.408420][T16678] R13: 00000000001cf72c R14: 00007ffcbc13d2b0 R15: 0000000000000258 [ 1900.412201][ T6208] (rcu_read_lock [ 1900.418153][T16678] [ 1900.424779][ T6208] ){....}-{1:3} [ 1900.429333][T16678] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1900.429352][T16678] CPU: 1 UID: 0 PID: 16678 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00213-ge0daef7de1ac #0 [ 1900.429383][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1900.429400][T16678] Call Trace: [ 1900.429409][T16678] [ 1900.429421][T16678] dump_stack_lvl+0x241/0x360 [ 1900.429463][T16678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1900.429499][T16678] ? __pfx__printk+0x10/0x10 [ 1900.429538][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.429568][T16678] ? vscnprintf+0x5d/0x90 [ 1900.429603][T16678] panic+0x349/0x880 [ 1900.429636][T16678] ? __warn+0x174/0x4d0 [ 1900.429670][T16678] ? __pfx_panic+0x10/0x10 [ 1900.429713][T16678] __warn+0x344/0x4d0 [ 1900.429744][T16678] ? __lock_acquire+0x165b/0x2100 [ 1900.429778][T16678] report_bug+0x2b3/0x500 [ 1900.429814][T16678] ? __lock_acquire+0x165b/0x2100 [ 1900.429848][T16678] handle_bug+0x60/0x90 [ 1900.429874][T16678] exc_invalid_op+0x1a/0x50 [ 1900.429901][T16678] asm_exc_invalid_op+0x1a/0x20 [ 1900.429941][T16678] RIP: 0010:__lock_acquire+0x165b/0x2100 [ 1900.429974][T16678] Code: 0f b6 04 08 84 c0 0f 85 31 0a 00 00 83 3d f0 d9 9e 0e 00 75 19 90 48 c7 c7 80 97 0a 8c 48 c7 c6 60 c0 0a 8c e8 76 4c e5 ff 90 <0f> 0b 90 90 90 e9 be fd ff ff 90 0f 0b 90 e9 16 fd ff ff 90 e8 5c [ 1900.429997][T16678] RSP: 0018:ffffc90003d0f0f0 EFLAGS: 00010046 [ 1900.430022][T16678] RAX: b72f87a4a9175900 RBX: 000000000b346abc RCX: ffff888044bf3c00 [ 1900.430043][T16678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1900.430061][T16678] RBP: ffff888044bf4708 R08: ffffffff81602a82 R09: 1ffffffff2033056 [ 1900.430082][T16678] R10: dffffc0000000000 R11: fffffbfff2033057 R12: ffff888044bf46c4 [ 1900.430104][T16678] R13: ffff888044bf3c00 R14: 0000000000000000 R15: ffff888044bf4728 [ 1900.430129][T16678] ? __warn_printk+0x292/0x360 [ 1900.430178][T16678] lock_acquire+0x1ed/0x550 [ 1900.430208][T16678] ? down+0x39/0xc0 [ 1900.430248][T16678] ? ib_device_get_by_netdev+0x85/0x5e0 [ 1900.430287][T16678] ? __pfx_lock_acquire+0x10/0x10 [ 1900.430325][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.430357][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.430388][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.430419][T16678] _raw_spin_lock_irqsave+0xd5/0x120 [ 1900.430453][T16678] ? down+0x39/0xc0 [ 1900.430490][T16678] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1900.430523][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.430555][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.430586][T16678] down+0x39/0xc0 [ 1900.430625][T16678] __dev_close_many+0x107/0x300 [ 1900.430665][T16678] ? __pfx___dev_close_many+0x10/0x10 [ 1900.430705][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.430733][T16678] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1900.430771][T16678] dev_close_many+0x24e/0x4c0 [ 1900.430811][T16678] ? __pfx_dev_close_many+0x10/0x10 [ 1900.430847][T16678] ? try_to_wake_up+0x959/0x1470 [ 1900.430885][T16678] unregister_netdevice_many_notify+0x530/0x1da0 [ 1900.430922][T16678] ? __queue_work+0x199/0xf50 [ 1900.430951][T16678] ? __pfx_lock_release+0x10/0x10 [ 1900.430983][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431014][T16678] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1900.431051][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431079][T16678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1900.431112][T16678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1900.431143][T16678] ? __queue_work+0x199/0xf50 [ 1900.431173][T16678] ? mod_delayed_work_on+0x1ae/0x370 [ 1900.431215][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431243][T16678] ? lockdep_hardirqs_on+0x99/0x150 [ 1900.431280][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431317][T16678] unregister_netdevice_queue+0x303/0x370 [ 1900.431348][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431377][T16678] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1900.431408][T16678] ? linkwatch_urgent_event+0x2b5/0x450 [ 1900.431442][T16678] __tun_detach+0x6b9/0x1600 [ 1900.431489][T16678] tun_chr_close+0x105/0x1b0 [ 1900.431522][T16678] ? __pfx_tun_chr_close+0x10/0x10 [ 1900.431556][T16678] __fput+0x23e/0xa50 [ 1900.431601][T16678] task_work_run+0x251/0x310 [ 1900.431640][T16678] ? __pfx_task_work_run+0x10/0x10 [ 1900.431673][T16678] ? do_exit+0xa25/0x28e0 [ 1900.431704][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431732][T16678] ? do_exit+0xa25/0x28e0 [ 1900.431764][T16678] do_exit+0xa2a/0x28e0 [ 1900.431797][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431826][T16678] ? __pfx_do_exit+0x10/0x10 [ 1900.431856][T16678] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1900.431884][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.431912][T16678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1900.431945][T16678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1900.431975][T16678] ? _raw_spin_lock_irq+0xdf/0x120 [ 1900.432011][T16678] do_group_exit+0x207/0x2c0 [ 1900.432042][T16678] ? _raw_spin_unlock_irq+0x23/0x50 [ 1900.432075][T16678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1900.432103][T16678] ? lockdep_hardirqs_on+0x99/0x150 [ 1900.432141][T16678] get_signal+0x16b2/0x1750 [ 1900.432187][T16678] ? __pfx_get_signal+0x10/0x10 [ 1900.432229][T16678] arch_do_signal_or_restart+0x96/0x860 [ 1900.432272][T16678] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1900.432316][T16678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1900.432354][T16678] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1900.432394][T16678] syscall_exit_to_user_mode+0xce/0x340 [ 1900.432434][T16678] do_syscall_64+0x100/0x230 [ 1900.432476][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.432514][T16678] RIP: 0033:0x7f65ae98473c [ 1900.432535][T16678] Code: Unable to access opcode bytes at 0x7f65ae984712. [ 1900.432550][T16678] RSP: 002b:00007ffcbc13d200 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1900.432577][T16678] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007f65ae98473c [ 1900.432597][T16678] RDX: 0000000000000030 RSI: 00007ffcbc13d2b0 RDI: 00000000000000f9 [ 1900.432615][T16678] RBP: 00007ffcbc13d25c R08: 0000000000000000 R09: 0079746972756365 [ 1900.432635][T16678] R10: 00007f65aeb487e0 R11: 0000000000000246 R12: 0000000000000032 [ 1900.432653][T16678] R13: 00000000001cf72c R14: 00007ffcbc13d2b0 R15: 0000000000000258 [ 1900.432682][T16678] [ 1900.433887][T16678] Kernel Offset: disabled