last executing test programs: 10m36.339405068s ago: executing program 2 (id=1506): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x0, 0xff}}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000040)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000131401002dbd9a7000000000"], 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$HCIINQUIRY(r6, 0x800448d4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r8, 0x40046103, 0x0) 10m35.055894301s ago: executing program 2 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r7, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f046}) write$binfmt_misc(r6, &(0x7f0000000440)="a02bb51fa61758458bf2b1d7aebcbcb4187804d5027b760443d59645f54c5b99dc35a452a75501cb9b6c7f3941166c23", 0x30) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1005, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x742e2473f7b6489d, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xb, 0x1, 0x5, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @alu={0x4, 0x1, 0x4, 0x1, 0x6, 0xcd1741f6ae17da35, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x3, 0x9, 0x3, 0x2, 0x10}, @generic={0xe, 0x8, 0xa, 0xc, 0x23}]}, &(0x7f0000000000)='syzkaller\x00', 0xe9, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r8], &(0x7f0000000340)=[{0x1, 0x1, 0x0, 0xb}], 0x10, 0x1}, 0x94) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x10}}, 0x0) syz_usb_connect(0x2, 0x47, 0x0, 0x0) 10m30.920048734s ago: executing program 2 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x2040400) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79kx\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\x00\x00\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16Q\x0e\xe4oz\x85\xabg\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\xa5\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x2000, 0x6, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) 10m24.844974713s ago: executing program 2 (id=1521): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100000000ff02000000000000000000000000000137a5bc3bfda259f50cfdb6afe174f825df40b38cc208b36fd09b2e667ae7e61e9936ecace0a5210501892e159a4f8abd17"], 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000000)={{0x0, 0x0, 0x81, 0xfffffffe, 'syz0\x00', 0x5}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x8, 'syz1\x00', &(0x7f0000000140)=[':#,\x00'], 0x4}) socket(0x28, 0x5, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 10m23.917450057s ago: executing program 2 (id=1537): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone3(&(0x7f0000000680)={0x9000000, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), {0x2e}, &(0x7f0000000400)=""/234, 0xea, 0x0, 0x0}, 0x58) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(0x0, 0x2, 0x1) gettid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r4) open(&(0x7f0000000b80)='./file1\x00', 0x42a043, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@intr}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x4450, &(0x7f000000cd80)="$eJzs3c9PG9kdAPA3A0kgzQ9Ic0ilSrXUSK3aCkFObYlUQkgIJDRt2qRVL44BJ6E1OAJT9RCp9Ba1p0o9VD1EXWlvnCIOe83+CXvZY/Ycafewl5VWipaV7TEwY3vxZu2wJJ/PgWHevB9f8515fj6YFycqD5bWcktrucJKrrxwb+1C7q/l0vpyMcSvScvxj7y+8elML+6Tg7733mY3L1/93Z0LIby/+OGL7e3t7VDVH1oa2/P7Z58+Wth7bIgzbar9tu6tW/4UQjjbFFdVXwjhj++FEIUQLiVlk8lxMIRwMtSv3Xn0r7u5LkXz9HnxYv7l3OOt8fOzm0+22r/2KIT/lb73s/vLH/+wb/yjn3RpeAAAAAAAAAAAAAAAAAAADrnpWzdv/2Z0LDyLQv9m1Px93enk2O77sdtd84Pev1gAAAAAAAAAAAAAAAAAAAD4ltr9/n8uOtPi+/9TyXGiTfvtX/U+Rnpn5tc3p66MjiX7v0dN13+eFH1yqS8Mt9j3Pbv/+6VM+9b7vzeP86oa8TXGHQpRPJI6j+ORkRDeSTZ+Pxcdj0vltcpP75XXVxa7Fsahlc5/fff+VHaSDf07zf9kpv/e7///3aa7qXp+t/kW+/s/exvIoZTOf1/beu/+I+oo/5cz7b4y/wPfNPpQyz+vLp3//lrZ4N4KE/UJoJr/f/fvn/+pTP+9ev5PhRByUTXWXGoGqK5hquXt1iukpfN/pFaWmjqTP2S75//zTP6vZPo/qPl/I/tGREvp/B+tlaWn5d3nfzje//m/mun/IPJfjX+je0vMN1o6/8fqhf2pKrW/ZKfz/3Sm/17l/3acxHkqSt0Bm1G9vN3/qyMtnf/mBdnu57+4o/XftUz75vz/oSef/xrjNj7/Nab/H0f1z3+0ls7/YNt6nT7/M5l2vZ7/J2rrP15VOv/Ha2XptfNQ7Wen+Z/N9N+r/NdWJQON/O/OJ18cq5f/3/qvI+n8f6deGO+tsVH7WVv/Rfuv/69n+m+T/6PdewXN679q/Btx90Z4k6Xzf6JtvWr+P+jg/f9Gpl2b/P/2dHfCD+FIV5cTb510/k+2rVd7/gf2z/9cpl2v3/9/1MvOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ByeQ4FKJ4JHUexyMjIVxOzs+F49F8YTE/Xyov/GUthKmkPBfORPdL5flCKb+0Ul4s5gulUnkhhCvJ9bNhIForlSv55cLDqzt9DUYPioXVynyxUAkhTCfl3w8nG33NL1WWCw9DCNd2rp2Oy6sPHxRW8otLq78cHR0dDTM7MQxHxb9ViiuV+uj1qyHM7rQdivYEV7t8fSeWE9Gfy+urK4VSrfzGnjal8kKhtKfNXHLtP2E4qqyurywUKsV8qXy/Md5BmkiOUzO3fn/rxljT9btR/Tj5esMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Gt6Nv6L/4YQ+utncQhhovFL1Kr+0+fFi/mXc4+3xs/Pbj7ZetGuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAlO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdilY5QGgigMwG/GQu08htWy29muKKKFK4In0GN4GD2Kl/AOKVKkTRECySyEzS5sk1Tf1zyYn5n3YB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM8/TefbzVTUSKq81lxN/X/+Iwfyn15378/sUZZuR0nl+7h8e6Kf+ejvK7crRs8y5dr74/Y6T2fgd7Mtynvb7P9eRcU/s2NV/f9yZSriKiLfltyrmq5r0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJYdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//kkogsw==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbbf, {0x0, 0x0, 0x0, 0x0, 0x21, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x40000) 10m19.095724135s ago: executing program 2 (id=1532): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xc05c7000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc044565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x2, 0x51cf, {}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, "0000efff"}, 0xe, 0x1, {}, 0x4}) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x202803, 0x0) renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') ioctl$KVM_S390_VCPU_FAULT(r2, 0x4004ae52, &(0x7f0000000080)=0xfffffffffffffffb) syz_open_dev$sndmidi(&(0x7f0000000000), 0x7f, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000340)={'\x00', 0x9, 0x9, 0xfffffffe, 0x2, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m1.410867739s ago: executing program 32 (id=1532): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xc05c7000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc044565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x2, 0x51cf, {}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, "0000efff"}, 0xe, 0x1, {}, 0x4}) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x202803, 0x0) renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') ioctl$KVM_S390_VCPU_FAULT(r2, 0x4004ae52, &(0x7f0000000080)=0xfffffffffffffffb) syz_open_dev$sndmidi(&(0x7f0000000000), 0x7f, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000340)={'\x00', 0x9, 0x9, 0xfffffffe, 0x2, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7m17.540128097s ago: executing program 3 (id=1927): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100000000ff02000000000000000000000000000137a5bc3bfda259f50cfdb6afe174f825df40b38cc208b36fd09b2e667ae7e61e9936ecace0a5210501892e159a4f8abd17"], 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000000)={{0x0, 0x0, 0x81, 0xfffffffe, 'syz0\x00', 0x5}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x8, 'syz1\x00', &(0x7f0000000140)=[':#,\x00'], 0x4}) socket(0x28, 0x5, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 7m12.525239821s ago: executing program 3 (id=1936): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e978feffffffffdbdf250a0000000000000008000500", @ANYRES32=r8, @ANYBLOB="dec43c3f5bf547e73965fcb3291c9cd0cbe524b24d139c47c40ab04771664e69f845a63b838bb1b2a968987f666a53119e96f9e9eb757f9d26db3e44934b75c2ae6ea62b884de5c65b107d30ce6981c2489860f1dc26fc188c48b7a1b53083f5b6840022618e60f9d7b041b880f878e9932a0b004e2b69824a78a696fb3b3d3f51986983cad54fc1fabe806098e69cf65960d031b3e19520c6f11902719ae57ffa28999f4fdd1dd60861c18eecee54b27700d729"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) 7m7.32307615s ago: executing program 3 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000280)) shutdown(r6, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000000), 0x0) 7m6.252791596s ago: executing program 3 (id=1952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x151, 0x0, 0x86c4, 0x0, 0x4, 0x0, 0x9, 0x0, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) 7m5.8235917s ago: executing program 3 (id=1954): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r4, 0x7, '\x00', 0x0, r3, 0x0, 0x3}, 0x50) pipe(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) 7m4.913223304s ago: executing program 3 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4004080, 0x0, 0x0) read$qrtrtun(r5, 0x0, 0x0) fsopen(0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x888000, 0x0) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 6m48.798804401s ago: executing program 33 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4004080, 0x0, 0x0) read$qrtrtun(r5, 0x0, 0x0) fsopen(0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x888000, 0x0) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 16.941794289s ago: executing program 5 (id=2811): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f00000001c0)={0x2, 0x7, 0x87, 0x7f, 0x1000, 0x5}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r4, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000480)=0x10000001, 0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) writev(r2, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x2c) 16.741463986s ago: executing program 1 (id=2812): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.793260302s ago: executing program 4 (id=2814): socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x8) listen(0xffffffffffffffff, 0x2) r3 = socket(0x2b, 0x80801, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x13, 0x1, 0x40000000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) 15.760423364s ago: executing program 5 (id=2815): r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000300)={{0x80, 0x4}, 'port1\x00', 0x6, 0x1b1878, 0x4, 0x2, 0x3e4, 0x40000000, 0x4, 0x0, 0x0, 0x3}) close(0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00), 0x0, r3) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40000) bind$qrtr(r0, &(0x7f0000000180)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108", 0x25}], 0x1) 15.035511883s ago: executing program 5 (id=2816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x400, 0xe, @loopback, 0x5}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64], 0xf5, 0x305, &(0x7f0000000080)="$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") socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x8, 0x5, 0x2, 0x8000000000000000, 0xf87, 0x80000001, 0x10001, 0x2, 0x0, 0x1, 0x6, 0x3, 0x2, 0x0, 0xffffffffffffff01, 0x14], 0x1, 0x68200}) sendto$inet6(r0, &(0x7f0000000300)="4b4385bd35e0e70abb78dce30056dcce7bc67d495c9a55bfad860af9e7b705deab168cbf68bbc7ac28250c578c75fc0236ea1f7feced05191fc3765211bf63e2253cdb39071304717f1fe511740e15b0411d92a3829a96687b26a249e06d04ed97a84c5c78883dc5b56f545ff8ce096e68df8e72dfece207162da9816763722a01c5f751263eb9d8b273d65a94153cd18dd092e6af38d5b866c3d3b16e6dafeb09cca76bd2266795afba0b5dd7fd28593974d9782b55620000000000000000000000000000000000006f7ab71fa63a4f6001b715880bd06cc795b3b5c1cc3c13e7c9d46c48b1a595fc8df33839ab7dff71f7b3e7b603452e511bbf8c671a", 0xfe, 0x64040011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xa6) 12.8307668s ago: executing program 4 (id=2818): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) 12.116248497s ago: executing program 5 (id=2819): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.800660982s ago: executing program 1 (id=2820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = msgget$private(0x0, 0xc) msgsnd(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x401, 0x800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x30d8, &(0x7f0000000240)={0x0, 0xf489, 0x1000, 0xffffffff, 0x15a}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x9) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x540, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11.520888674s ago: executing program 4 (id=2822): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x80000) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000500)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0xf, 0x0, &(0x7f0000000380)) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000100)=ANY=[], 0x3, 0x7c9, &(0x7f0000000200)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file1\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{}, 0x0, &(0x7f0000000d00)=r6}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7ffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.168545023s ago: executing program 6 (id=2823): gettid() ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) ustat(0x6, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x800, 0x4e}}}}}, 0x20}}, 0x0) 10.159794014s ago: executing program 1 (id=2824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fanotify_init(0x4, 0x101000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x201, 0x4800003e, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0x9362, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r8 = open$dir(&(0x7f00000023c0)='./file0\x00', 0x40, 0x86) fanotify_mark(r4, 0x641, 0x1019, r8, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) r9 = openat$dir(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x1, 0x10001011, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10.050522443s ago: executing program 4 (id=2825): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010400000000000000000a0000000400bb100300fc0000000000000000000000000000201400040000000000000000000000feff"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) socket(0x10, 0x80002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = gettid() r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) recvmmsg(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)}, 0x10000}], 0x1, 0x40001023, 0x0) r7 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x11d, 0x20, 0x0, 0x0) read$FUSE(r4, &(0x7f0000001a00)={0x2020}, 0x2020) socket$inet_icmp(0x2, 0x2, 0x1) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0x80000000, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0xd7}) rt_sigqueueinfo(r3, 0xb, &(0x7f0000000440)={0x0, 0x0, 0xfffffffb}) 9.293461943s ago: executing program 0 (id=2826): r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000300)={{0x80, 0x4}, 'port1\x00', 0x6, 0x1b1878, 0x4, 0x2, 0x3e4, 0x40000000, 0x4, 0x0, 0x0, 0x3}) close(0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00), 0x0, r3) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40000) bind$qrtr(r0, &(0x7f0000000180)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108", 0x25}], 0x1) 8.507696936s ago: executing program 1 (id=2827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x9, &(0x7f0000000000)=0x3fd, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5, 0x6000, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r7, &(0x7f0000000340)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000000480)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64], 0x4, 0x339, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 8.201702091s ago: executing program 0 (id=2828): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x88, &(0x7f00000001c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb, 0x36, 0x66, 0x65, 0x66, 0x34b61ac358e0f40a, 0x63], 0x2d, [0x31, 0x35, 0x33, 0x62], 0x2d, [0x39, 0x55, 0x39, 0x61], 0x2d, [0x65, 0x63, 0xc, 0x69], 0x2d, [0x35, 0x30, 0x65, 0x33, 0x66, 0x35, 0x33, 0x38]}}}]}, 0x3, 0x448, &(0x7f0000000580)="$eJzs28tvG1UXAPAzdpx+fSZfVR59AIGCqHgkTVpKF2xAILEACQkWZWmStCp1G9QEiVYVBITKElVij1gi8Rewgg0CVpXYwh4hVSibFlZGY88ktmPn6cRt/ftJ0947c617j2eOfWduHEDfGkn/SSL2RMTvETFUrzY3GKn/d2fh2uQ/C9cmk6hW3/47qbW7vXBtMm+av253XhmIKHyexOE2/c5euXqhXKlMX87qY3MXPxibvXL1+fMXy+emz01fmjh9+uSJ8RdPTbzQlTjTuG4f+njmyMHX373x5uSZG+/98l2Sx98SR5eMrHTwqWq1y9311t6GcjLQw4GwLsV6mkaplv9DUYylkzcUr33W08EBW6parVYf7Hx4vgrcx5Lo9QiA3si/6NP733zbpqnHXeHWy/UboDTuO9lWPzIQhaxNqeX+tptGIuLM/L9fp1tszXMIAIAmP6Tzn+fazf8K0fhcaF+2hjIcEf+PiP0RcSoiDkTEAxG1tg9FxMPr7L91kWT5/GffhuJaq3T+91K2ttU8/8tnfzFczGp7a/GXkrPnK9PHs5Edi9KOtD6+Qh8/vvrbl20PZF3k8790S/vP54JZo78GdjS/bKo8V95MzI1ufRpxaKBd/MniSkASEQcj4tAG+zj/zLdHOh0bWTX+FXRhnan6TcTT9fM/Hy3x55KV1yfH/heV6eNj+VWx3K83r7/Vqf9Nxd8F6fnf1fb6X4x/OGlcr51dfx/X//ii4z3N6vG3v/4Hk3ea9n1Unpu7PB4xmLxRH3Tj/omWdhNL7dP4jx1tn//7Y+mdOBwR6UX8SEQ8GhGPZWN/PCKeiIijy0O7OZgVfn7lyfdrhdJG4t9aafxT6zr/S4XBaN1z9UI5D7rhUPHCT983dTq8VFzb+T9ZKx3L9qzl82/ZuDoUNvPeAQAAwL2iEBF7IimMLpYLhdHR+t/wH4hdhcrM7NyzZ2c+vDRV/43AcJQK+ZOuoYbnoePZbX1en2ipn8ieG39V3Fmrj07OVKZ6HTz0ud0d8j/1Z7HXowO2nN9rQf+S/9C/5D/0L/kP/atN/u/sxTiA7dfu+/+Tti2tCMD9pin/90ly6Cfu/6F/yX/oX/If+tLszlj9R/IK90gh/yDfjr6icFeErLBFhR5/MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTJfwEAAP//aJTf6A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000001, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x4}, {}, {}, @raw32}], 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) 7.417918754s ago: executing program 6 (id=2829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={r8, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a, r8}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r9, 0x1}, &(0x7f0000000100)=0x8) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x60401) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800), 0x106, 0x2}}, 0x20) r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000900)=0x15) writev(r12, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) recvfrom(r7, &(0x7f0000000400)=""/254, 0xfe, 0x2002, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010100}, 0x4, 0x1, 0x4, 0x1}}, 0x80) 7.401008615s ago: executing program 1 (id=2830): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.650177875s ago: executing program 4 (id=2831): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xba99}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) modify_ldt$write(0x1, &(0x7f0000000280)={0x1001, 0x20001000}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) modify_ldt$write2(0x11, &(0x7f0000000300)={0x8, 0x20000000, 0x0, 0x1, 0x2, 0x0, 0x1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x3b69, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) ppoll(&(0x7f00000012c0)=[{r0, 0x109b}, {r1}, {r0, 0x2404}, {r1, 0x80}, {r1, 0x4000}, {r1, 0x15c}], 0x6, &(0x7f0000001300)={0x0, 0x3938700}, &(0x7f0000001340)={[0xfffffffffffffff7]}, 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xfffffffb, 0x2167, 0x2, 0x100000, 0x88d7, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0xfff, 0x344, 0x1, 0x0, 0x200, 0x9, 0x3, 0x81, 0xe, 0x0, 0x0, 0x80, 0x7ff, 0x1, 0xffffffff, 0xb0c4, 0x7df, 0x8, 0xf3, 0x1]}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 6.649354396s ago: executing program 0 (id=2841): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x88, &(0x7f00000001c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb, 0x36, 0x66, 0x65, 0x66, 0x34b61ac358e0f40a, 0x63], 0x2d, [0x31, 0x35, 0x33, 0x62], 0x2d, [0x39, 0x55, 0x39, 0x61], 0x2d, [0x65, 0x63, 0xc, 0x69], 0x2d, [0x35, 0x30, 0x65, 0x33, 0x66, 0x35, 0x33, 0x38]}}}]}, 0x3, 0x448, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000001, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x4}, {}, {}, @raw32}], 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) 5.7276853s ago: executing program 6 (id=2832): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) 5.130583928s ago: executing program 0 (id=2833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, 0x0, 0x88882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r11, 0x50, 0x0}, 0x10) 3.700001633s ago: executing program 6 (id=2834): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept(r7, 0x0, 0x0) stat(0x0, &(0x7f0000000640)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x600, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.430635675s ago: executing program 5 (id=2835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = msgget$private(0x0, 0xc) msgsnd(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x401, 0x800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x30d8, &(0x7f0000000240)={0x0, 0xf489, 0x1000, 0xffffffff, 0x15a}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x9) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x540, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 2.025529967s ago: executing program 0 (id=2836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fcntl$getown(r1, 0x9) ptrace$ARCH_SET_CPUID(0x1e, r3, 0x400000001, 0x1012) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0xffffffffffffffdf) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000dfc44ba0000000abb0084000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r5}, 0x38) unshare(0x8000600) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2024) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002200)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x1, 0x0, r8, 0x7, 0x81, 0x401, 0xd466, 0x0, 0x10000, 0x5}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be81000000100000000100000000000000ff0022eb000000002000000002000000000000000000000008"], 0x0) socket$inet6(0xa, 0x2, 0x0) 2.007204289s ago: executing program 4 (id=2837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0x10001, 0xc00000, 0x7]}, &(0x7f00000001c0)=0x78) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe21, 0x0, @mcast2, 0x41de}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.352527121s ago: executing program 6 (id=2838): r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000300)={{0x80, 0x4}, 'port1\x00', 0x6, 0x1b1878, 0x4, 0x2, 0x3e4, 0x40000000, 0x4, 0x0, 0x0, 0x3}) close(0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00), 0x0, r3) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40000) bind$qrtr(r0, &(0x7f0000000180)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426", 0x28}], 0x1) 652.709328ms ago: executing program 5 (id=2839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x29, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 412.430347ms ago: executing program 0 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040600) flock(0xffffffffffffffff, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000000070000000000000000000000000080"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) setitimer(0x1, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x3, 0x7) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000180)=0x86) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x24}, 0x94) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x60000000}) 408.96µs ago: executing program 1 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9441, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$usbfs(0x0, 0x74, 0x101301) getsockopt(0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f00000007c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000140)=@l={0x92, 0xe, 0xd0, 0x80, 0x0, 0x40}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x100}, 0x0, [0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2, 0xb16, 0xfffffffb, 0x0, 0x0, 0x1000000, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x4, 0xe, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x88000101, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x783, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0xe, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x40000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x40020000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 0s ago: executing program 6 (id=2843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = msgget$private(0x0, 0xc) msgsnd(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x401, 0x800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x30d8, &(0x7f0000000240)={0x0, 0xf489, 0x1000, 0xffffffff, 0x15a}) write$sequencer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x9) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x540, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) kernel console output (not intermixed with test programs): =unconfined pid=11633 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e8f8ebe9 code=0x7ffc0000 [ 953.901682][T11671] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 953.928859][ T27] audit: type=1326 audit(1756248245.130:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e8f8ebe9 code=0x7ffc0000 [ 954.149024][ T27] audit: type=1326 audit(1756248245.130:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e8f8ebe9 code=0x7ffc0000 [ 954.211781][ T27] audit: type=1326 audit(1756248245.130:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e8f8ebe9 code=0x7ffc0000 [ 954.235092][ T27] audit: type=1326 audit(1756248245.130:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f10e8f8ebe9 code=0x7ffc0000 [ 954.259142][ T27] audit: type=1326 audit(1756248245.130:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e8f8ebe9 code=0x7ffc0000 [ 954.612992][T11688] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 955.277036][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.289660][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 955.299886][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 955.319008][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 955.329907][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 955.337706][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 955.533928][T11701] overlayfs: failed to clone upperpath [ 956.447131][T11689] wlan0 speed is unknown, defaulting to 1000 [ 957.122559][T11716] --map-set only usable from mangle table [ 957.174592][T11689] lo speed is unknown, defaulting to 1000 [ 957.471472][T11050] Bluetooth: hci3: command 0x0409 tx timeout [ 958.193421][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1695'. [ 958.202573][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 958.475556][T11735] netlink: 'syz.4.1696': attribute type 4 has an invalid length. [ 959.590514][T11050] Bluetooth: hci3: command 0x041b tx timeout [ 959.710733][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 959.710747][ T27] audit: type=1326 audit(1756248256.490:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 959.778258][ T27] audit: type=1326 audit(1756248256.490:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 959.879167][ T27] audit: type=1326 audit(1756248256.650:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 960.118510][T11748] overlayfs: failed to clone upperpath [ 960.306446][T11751] 9pnet_fd: Insufficient options for proto=fd [ 960.833232][ T27] audit: type=1326 audit(1756248256.650:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 960.867962][ T27] audit: type=1326 audit(1756248256.650:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 961.135310][T11689] chnl_net:caif_netlink_parms(): no params data found [ 961.670514][T11050] Bluetooth: hci3: command 0x040f tx timeout [ 962.094088][T11689] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.101586][T11689] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.144390][T11689] device bridge_slave_0 entered promiscuous mode [ 962.952151][T11786] netlink: 'syz.0.1709': attribute type 11 has an invalid length. [ 963.009168][T11689] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.037179][T11689] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.614681][T11689] device bridge_slave_1 entered promiscuous mode [ 963.656320][T11793] overlayfs: failed to clone upperpath [ 963.726703][T11795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1712'. [ 963.750254][T11689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.750726][T11050] Bluetooth: hci3: command 0x0419 tx timeout [ 963.788986][T11689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.010757][T11689] team0: Port device team_slave_0 added [ 964.922571][T11689] team0: Port device team_slave_1 added [ 965.027281][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.063320][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.871207][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.959366][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.974280][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.076417][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.146368][T10904] device hsr_slave_0 left promiscuous mode [ 966.173571][T10904] device hsr_slave_1 left promiscuous mode [ 966.232885][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.373834][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.503599][T10904] device bridge_slave_1 left promiscuous mode [ 966.563425][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.679068][T10904] device bridge_slave_0 left promiscuous mode [ 966.709970][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.084606][T11838] block device autoloading is deprecated and will be removed. [ 968.583578][T10904] team0 (unregistering): Port device team_slave_1 removed [ 968.780751][T10904] team0 (unregistering): Port device team_slave_0 removed [ 968.877573][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.736983][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.952747][T10904] bond0 (unregistering): Released all slaves [ 974.099894][T11689] device hsr_slave_0 entered promiscuous mode [ 974.248864][T11689] device hsr_slave_1 entered promiscuous mode [ 974.454614][T11689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.570510][T11689] Cannot create hsr debugfs directory [ 976.686157][T11945] loop3: detected capacity change from 0 to 2048 [ 976.693759][T11945] EXT4-fs: Ignoring removed mblk_io_submit option [ 976.729993][T11945] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 977.985352][T11931] udevd[11931]: incorrect ext4 checksum on /dev/loop3 [ 978.099423][T11965] netlink: 'syz.3.1751': attribute type 6 has an invalid length. [ 978.659341][T11965] input: syz1 as /devices/virtual/input/input11 [ 979.867846][ T27] audit: type=1326 audit(1756248276.210:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.0.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x0 [ 979.985211][T11978] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 981.778121][T12005] syz.4.1764 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 983.654019][T11689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 983.687127][T11689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 983.718937][T11689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 983.756825][T11689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 987.330139][T11689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.167725][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 988.259753][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 988.566384][T11689] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.766406][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 988.776701][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 988.787288][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.794522][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.214222][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 989.581059][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 989.682133][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 989.705620][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.712830][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.737503][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 989.771427][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 989.920105][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 989.956240][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 990.068363][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 991.344781][T11689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 991.427239][T11689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 991.570982][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 991.583597][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 991.919857][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 992.193942][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 992.813997][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 992.931147][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 992.941274][T12077] netlink: 'syz.3.1778': attribute type 10 has an invalid length. [ 992.956254][T12077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1778'. [ 992.991415][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 993.215736][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.223427][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.410223][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 994.997772][T12109] netlink: 'syz.4.1787': attribute type 10 has an invalid length. [ 995.025916][T12109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1787'. [ 996.620017][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 997.286837][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 997.505328][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.390128][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.399181][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.408218][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.417549][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.426620][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.435641][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.444621][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.453649][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.462675][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.472067][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1000.855542][T12175] device batadv_slave_0 entered promiscuous mode [ 1005.279151][T12212] loop3: detected capacity change from 0 to 2048 [ 1005.754970][T12212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1005.779983][ T27] audit: type=1800 audit(1756248302.570:257): pid=12212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1807" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 1007.464206][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1007.497356][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1007.895427][T12255] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1009.000237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1009.053981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1009.724136][T11689] device veth0_vlan entered promiscuous mode [ 1010.172703][T12283] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1010.567599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1010.584587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1011.778953][ T27] audit: type=1107 audit(1756248307.830:258): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1011.814341][T11689] device veth1_vlan entered promiscuous mode [ 1012.083831][T12295] overlayfs: failed to clone upperpath [ 1013.187433][T12312] siw: device registration error -23 [ 1014.247361][T12310] fuse: Bad value for 'fd' [ 1014.567752][T12317] __nla_validate_parse: 42 callbacks suppressed [ 1014.567766][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1828'. [ 1016.303990][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1016.319798][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1016.334381][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1016.349091][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1016.359410][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1016.367781][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1016.549089][T12331] wlan0 speed is unknown, defaulting to 1000 [ 1017.104601][T12331] lo speed is unknown, defaulting to 1000 [ 1017.335438][T12348] overlayfs: failed to clone upperpath [ 1018.756739][T11050] Bluetooth: hci5: command 0x0409 tx timeout [ 1021.683895][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 1021.688597][T12331] chnl_net:caif_netlink_parms(): no params data found [ 1023.934265][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 1024.499856][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.517585][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.542855][T12331] device bridge_slave_0 entered promiscuous mode [ 1024.642164][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.649549][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.681739][T12331] device bridge_slave_1 entered promiscuous mode [ 1025.393795][T12331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.420033][T12331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.060674][T11050] Bluetooth: hci5: command 0x0419 tx timeout [ 1026.668383][T12331] team0: Port device team_slave_0 added [ 1026.779430][T12331] team0: Port device team_slave_1 added [ 1027.145060][T12464] netlink: 'syz.4.1858': attribute type 9 has an invalid length. [ 1027.183363][T12331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.231887][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.340003][T12331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.531827][T12331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.538830][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.179057][T12331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.770678][T12492] rdma_rxe: rxe_register_device failed with error -23 [ 1030.777662][T12492] rdma_rxe: failed to add lo [ 1031.185517][T12331] device hsr_slave_0 entered promiscuous mode [ 1031.215055][T12331] device hsr_slave_1 entered promiscuous mode [ 1031.260410][T12331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1031.269769][T12331] Cannot create hsr debugfs directory [ 1031.318397][T12492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1031.326046][T12492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1031.335484][T12492] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1031.343514][T12492] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1031.382709][T12492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1033.458092][T12530] netlink: 'syz.3.1865': attribute type 9 has an invalid length. [ 1033.548003][ T4524] device hsr_slave_0 left promiscuous mode [ 1033.564980][ T4524] device hsr_slave_1 left promiscuous mode [ 1033.575098][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.583324][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.593393][ T4524] device bridge_slave_1 left promiscuous mode [ 1033.599809][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.696810][ T4524] device bridge_slave_0 left promiscuous mode [ 1033.720154][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.673566][ T4524] device veth1_vlan left promiscuous mode [ 1034.719164][ T4524] device veth0_vlan left promiscuous mode [ 1037.863439][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 1037.965300][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 1038.041221][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.861087][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.927877][T12622] siw: device registration error -23 [ 1042.168298][ T4524] bond0 (unregistering): Released all slaves [ 1042.634682][T12619] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 1042.710057][T12637] xt_hashlimit: max too large, truncated to 1048576 [ 1043.548974][T12619] bridge0: port 3(team0) entered disabled state [ 1043.607607][T12619] device team0 left promiscuous mode [ 1043.614280][T12619] device team_slave_0 left promiscuous mode [ 1043.624490][T12619] device team_slave_1 left promiscuous mode [ 1043.631417][T12619] device vxlan0 left promiscuous mode [ 1043.637366][T12619] bridge0: port 3(team0) entered disabled state [ 1043.653137][T12619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.666362][T12619] bond0: (slave team0): Enslaving as an active interface with an up link [ 1044.876613][T12650] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1048.279206][T12690] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1049.077867][ T27] audit: type=1326 audit(1756248345.870:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138ebe9 code=0x0 [ 1049.385380][T12700] loop3: detected capacity change from 0 to 128 [ 1049.572047][T12704] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 1049.626488][T12700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1049.706993][T12700] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.732801][T12331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1050.073391][T12331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1050.304679][T12331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1050.491642][T12331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1051.205764][T12331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.275022][T12331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.297287][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.447252][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.954350][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.971342][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1052.029293][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.036541][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.271039][T12331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1053.096589][T12331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.225347][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1053.255372][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1053.306966][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1053.342027][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.349246][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.547940][ T6439] Process accounting resumed [ 1053.882945][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1053.902354][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 1053.936140][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1053.946865][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1053.968443][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1053.979483][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1053.994150][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1054.004014][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1054.014715][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1054.059332][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1054.069641][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1054.119983][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1054.725706][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1054.835973][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.842385][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.921313][T12775] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1057.530467][T12803] siw: device registration error -23 [ 1059.195701][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 1059.946996][ T27] audit: type=1326 audit(1756248356.720:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.165638][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1061.181111][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1061.230285][ T27] audit: type=1326 audit(1756248356.720:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.261115][ T27] audit: type=1326 audit(1756248356.720:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcebb58d550 code=0x7ffc0000 [ 1061.261125][T12331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.261150][ T27] audit: type=1326 audit(1756248356.720:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.315497][ T27] audit: type=1326 audit(1756248356.720:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.341250][ T27] audit: type=1326 audit(1756248356.720:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.372085][ T27] audit: type=1326 audit(1756248356.720:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.416234][T12841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.423911][ T27] audit: type=1326 audit(1756248356.720:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.423949][ T27] audit: type=1326 audit(1756248356.720:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.499767][ T27] audit: type=1326 audit(1756248356.720:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcebb58ebe9 code=0x7ffc0000 [ 1061.842720][T12841] device batadv_slave_0 entered promiscuous mode [ 1064.339380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1064.469270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1065.353790][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1065.372406][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1065.395232][T12331] device veth0_vlan entered promiscuous mode [ 1065.412902][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1065.661946][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1065.694798][T12331] device veth1_vlan entered promiscuous mode [ 1065.754998][T10898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1065.894845][T10898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1065.933184][T12331] device veth0_macvtap entered promiscuous mode [ 1066.414553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1066.443698][T12331] device veth1_macvtap entered promiscuous mode [ 1066.507557][T12331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.577034][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1066.593580][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1066.666230][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.700319][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.726604][T12331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.757139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1066.798103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1068.285217][T12331] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.325911][T12331] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.370338][T12331] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.389970][T12331] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.478225][T10898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.536229][T10898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.870660][T12953] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1961'. [ 1069.913629][T10898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1070.611614][T10900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.721378][T10900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.896454][T10900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1072.594741][T12967] Option ''MO' to dns_resolver key: bad/missing value [ 1073.291139][T11075] Process accounting resumed [ 1086.411421][T13046] fuse: Bad value for 'fd' [ 1086.677952][T13052] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1086.961093][T11050] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1087.660511][T11050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1087.680479][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1087.688514][T11050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1087.763257][T13046] sctp: failed to load transform for md5: -2 [ 1087.773130][T11050] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1087.784194][T11050] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.042981][T13056] wlan0 speed is unknown, defaulting to 1000 [ 1088.214514][T13056] lo speed is unknown, defaulting to 1000 [ 1089.039320][T13094] Error parsing options; rc = [-22] [ 1089.526732][T11074] libceph: connect (1)[c::]:6789 error -101 [ 1089.539867][T11074] libceph: mon0 (1)[c::]:6789 connect error [ 1089.834381][T11050] Bluetooth: hci1: command 0x0409 tx timeout [ 1089.916391][T11074] libceph: connect (1)[c::]:6789 error -101 [ 1089.931843][T11074] libceph: mon0 (1)[c::]:6789 connect error [ 1089.938159][T11078] libceph: connect (1)[c::]:6789 error -101 [ 1089.950793][T11078] libceph: mon0 (1)[c::]:6789 connect error [ 1089.970494][T11078] libceph: connect (1)[c::]:6789 error -101 [ 1089.976810][T11078] libceph: mon0 (1)[c::]:6789 connect error [ 1090.192538][T13056] chnl_net:caif_netlink_parms(): no params data found [ 1090.243532][T11078] libceph: connect (1)[c::]:6789 error -101 [ 1090.253333][T11078] libceph: mon0 (1)[c::]:6789 connect error [ 1090.268821][T11078] libceph: connect (1)[c::]:6789 error -101 [ 1090.278770][T11078] libceph: mon0 (1)[c::]:6789 connect error [ 1090.305165][T13056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.314073][T13056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.324338][T13056] device bridge_slave_0 entered promiscuous mode [ 1090.333815][T13056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.341528][T13056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.350066][T13056] device bridge_slave_1 entered promiscuous mode [ 1090.381232][T13056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.393925][T13056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.432824][T13056] team0: Port device team_slave_0 added [ 1090.448510][T13056] team0: Port device team_slave_1 added [ 1090.483473][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.490839][T11078] libceph: connect (1)[c::]:6789 error -101 [ 1090.495727][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.498640][T11078] libceph: mon0 (1)[c::]:6789 connect error [ 1090.523108][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.546960][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.555041][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.584585][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.626964][T13056] device hsr_slave_0 entered promiscuous mode [ 1090.635820][T13056] device hsr_slave_1 entered promiscuous mode [ 1090.658025][T13056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1090.683667][T13056] Cannot create hsr debugfs directory [ 1090.791280][T11078] libceph: connect (1)[c::]:6789 error -101 [ 1090.799159][T11078] libceph: mon0 (1)[c::]:6789 connect error [ 1090.861111][T11078] libceph: connect (1)[c::]:6789 error -101 [ 1090.867748][T11078] libceph: mon0 (1)[c::]:6789 connect error [ 1091.790458][T13086] ceph: No mds server is up or the cluster is laggy [ 1091.825590][T13109] ceph: No mds server is up or the cluster is laggy [ 1091.850363][T13105] ceph: No mds server is up or the cluster is laggy [ 1091.911859][T11050] Bluetooth: hci1: command 0x041b tx timeout [ 1092.060631][T13156] netlink: 'syz.0.2001': attribute type 10 has an invalid length. [ 1092.074115][T11074] libceph: connect (1)[c::]:6789 error -101 [ 1092.084295][T11074] libceph: mon0 (1)[c::]:6789 connect error [ 1092.091793][T13156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2001'. [ 1092.106842][T11074] libceph: connect (1)[c::]:6789 error -101 [ 1092.113453][T11074] libceph: mon0 (1)[c::]:6789 connect error [ 1092.119803][T13156] device team0 entered promiscuous mode [ 1092.138364][T11074] libceph: connect (1)[c::]:6789 error -101 [ 1092.148779][T11074] libceph: mon0 (1)[c::]:6789 connect error [ 1092.157175][T13156] device team_slave_0 entered promiscuous mode [ 1092.249425][T13156] device team_slave_1 entered promiscuous mode [ 1092.879894][T13156] bridge0: port 3(team0) entered blocking state [ 1092.920531][T13156] bridge0: port 3(team0) entered disabled state [ 1092.937264][T13156] bridge0: port 3(team0) entered blocking state [ 1092.943652][T13156] bridge0: port 3(team0) entered forwarding state [ 1094.101031][T11050] Bluetooth: hci1: command 0x040f tx timeout [ 1094.205125][T13056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1094.455136][T13056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1094.487795][T13056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1094.529769][T13056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1094.834475][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.889392][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1094.917493][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1095.084575][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.835484][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1095.850810][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1095.901085][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.908290][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.080697][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1096.089541][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1096.116658][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1096.153453][T11050] Bluetooth: hci1: command 0x0419 tx timeout [ 1096.156746][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.166676][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.215837][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1096.234704][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1097.788051][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1097.819987][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1098.457365][T13218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2013'. [ 1098.543725][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1099.008171][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1099.154497][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1099.717102][T13056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1099.886763][T13056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1101.265076][T13245] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1101.272327][T13245] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1101.287348][T13245] vhci_hcd vhci_hcd.0: Device attached [ 1101.297709][T13246] vhci_hcd: connection closed [ 1101.337313][T10893] vhci_hcd: stop threads [ 1101.493221][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1101.620493][T10893] vhci_hcd: release socket [ 1101.632833][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1101.684517][T11519] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1101.741551][T10893] vhci_hcd: disconnect device [ 1101.795284][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1101.915575][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1102.032265][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1102.844173][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 1102.844187][ T27] audit: type=1326 audit(1756248399.640:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebb58ebe9 code=0x7fc00000 [ 1103.514772][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 1104.307028][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1104.321487][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1104.609346][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.951441][T13302] Error parsing options; rc = [-22] [ 1107.252697][T13311] loop5: detected capacity change from 0 to 1024 [ 1107.310320][T11519] vhci_hcd: vhci_device speed not set [ 1107.396217][T13311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1107.748535][T13326] nfs: Unknown parameter 'fs' [ 1108.402625][T12331] EXT4-fs (loop5): unmounting filesystem. [ 1108.614146][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 1110.728746][T13364] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1111.939877][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 1112.454200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1112.671919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1112.835089][T13056] device veth0_vlan entered promiscuous mode [ 1112.848862][T13056] device veth1_vlan entered promiscuous mode [ 1112.865203][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1112.916962][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1112.969239][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1113.018164][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1113.055549][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1113.072893][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1113.963642][T13056] device veth0_macvtap entered promiscuous mode [ 1113.971826][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1113.991627][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1114.467166][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1115.219402][T13056] device veth1_macvtap entered promiscuous mode [ 1115.235314][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1115.435897][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.457284][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.675275][T13056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.092212][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.094292][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.120747][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.132884][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.204315][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.247861][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.558647][T13056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.852182][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1116.861830][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1116.871060][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1116.883375][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1116.899570][T13056] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.909989][T13056] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.236352][T13056] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.411540][T13056] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.693649][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 1118.501070][T10904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.512250][T10904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.528477][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1118.617289][T13460] Error parsing options; rc = [-22] [ 1118.649276][T13460] loop5: detected capacity change from 0 to 64 [ 1118.736204][T13460] hfs: get root inode failed [ 1119.338327][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.443695][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.482420][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1121.572657][ T27] audit: type=1326 audit(1756248418.270:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1122.236274][ T27] audit: type=1326 audit(1756248418.270:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1122.289515][ T27] audit: type=1326 audit(1756248418.270:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1123.190002][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 1123.200269][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 1123.381520][ T27] audit: type=1326 audit(1756248418.270:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1123.540351][ T27] audit: type=1326 audit(1756248418.270:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1123.832813][ T27] audit: type=1326 audit(1756248418.270:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1125.432438][ T27] audit: type=1326 audit(1756248418.270:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1125.661391][ T27] audit: type=1326 audit(1756248418.270:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1125.738686][ T27] audit: type=1326 audit(1756248418.270:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1127.109563][ T27] audit: type=1326 audit(1756248418.270:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1127.635215][ T27] audit: type=1326 audit(1756248418.280:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1128.311159][ T27] audit: type=1326 audit(1756248418.280:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1128.540901][ T27] audit: type=1326 audit(1756248418.280:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1129.211913][T13567] loop5: detected capacity change from 0 to 512 [ 1129.345881][T13567] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2084: casefold flag without casefold feature [ 1129.411518][ T27] audit: type=1326 audit(1756248418.280:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1129.465337][T13567] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2084: couldn't read orphan inode 15 (err -117) [ 1129.529455][T13567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1129.578209][ T27] audit: type=1326 audit(1756248418.280:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1130.559910][ T27] audit: type=1326 audit(1756248418.280:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1131.723907][T12331] EXT4-fs (loop5): unmounting filesystem. [ 1131.830573][ T27] audit: type=1326 audit(1756248418.280:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1132.480862][ T27] audit: type=1326 audit(1756248418.280:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1132.685419][ T27] audit: type=1326 audit(1756248418.280:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1133.328226][ T27] audit: type=1326 audit(1756248418.280:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1133.522041][T13616] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2094'. [ 1133.702544][T13620] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1133.905760][ T27] audit: type=1326 audit(1756248418.280:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1134.456035][T13616] tipc: Enabling of bearer rejected, failed to enable media [ 1134.559275][ T27] audit: type=1326 audit(1756248418.280:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1136.072267][ T27] audit: type=1326 audit(1756248418.280:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00e98ebe9 code=0x7ffc0000 [ 1136.306599][T13641] loop5: detected capacity change from 0 to 4096 [ 1136.707163][T13649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1137.143442][T13453] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1138.855822][T13678] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1138.883152][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.890516][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.112893][T11050] Bluetooth: hci5: command 0x0406 tx timeout [ 1140.483216][T13707] tipc: Started in network mode [ 1140.488275][T13707] tipc: Node identity 4, cluster identity 4711 [ 1140.494602][T13707] tipc: Node number set to 4 [ 1142.561606][T13717] ubi31: attaching mtd0 [ 1142.601962][T13717] ubi31: scanning is finished [ 1142.879359][T13717] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1142.887083][T13717] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1142.895734][T13717] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1142.902953][T13717] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1142.910543][T13717] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1142.917468][T13717] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1142.925921][T13717] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1272072182 [ 1142.936158][T13717] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1142.969231][T13720] ubi31: background thread "ubi_bgt31d" started, PID 13720 [ 1143.881156][T11070] Process accounting resumed [ 1144.885014][T13748] --map-set only usable from mangle table [ 1145.130775][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2122'. [ 1145.345660][T13751] loop5: detected capacity change from 0 to 40427 [ 1145.389247][T13751] F2FS-fs (loop5): invalid crc value [ 1146.165210][T13751] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1146.210623][T13751] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1146.938378][T12331] syz-executor: attempt to access beyond end of device [ 1146.938378][T12331] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1147.210581][T13772] overlayfs: failed to clone upperpath [ 1147.673622][T13774] netlink: 'syz.6.2128': attribute type 10 has an invalid length. [ 1147.690368][T13774] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2128'. [ 1147.699640][T13774] device team0 entered promiscuous mode [ 1147.708847][T13774] device team_slave_0 entered promiscuous mode [ 1147.715784][T13774] device team_slave_1 entered promiscuous mode [ 1147.732793][T13774] bridge0: port 3(team0) entered blocking state [ 1147.750213][T13774] bridge0: port 3(team0) entered disabled state [ 1148.513227][T13774] bridge0: port 3(team0) entered blocking state [ 1148.519752][T13774] bridge0: port 3(team0) entered forwarding state [ 1150.723061][T13791] loop5: detected capacity change from 0 to 32768 [ 1150.773929][T13791] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2129 (13791) [ 1151.003550][T13791] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1151.015419][T13791] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1151.024263][T13791] BTRFS info (device loop5): enabling disk space caching [ 1151.031371][T13791] BTRFS info (device loop5): doing ref verification [ 1151.038004][T13791] BTRFS info (device loop5): use zlib compression, level 3 [ 1151.045315][T13791] BTRFS info (device loop5): force clearing of disk cache [ 1151.052488][T13791] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1151.060629][T13791] BTRFS info (device loop5): doing ref verification [ 1151.067272][T13791] BTRFS info (device loop5): disk space caching is enabled [ 1151.556554][T13812] wlan0 speed is unknown, defaulting to 1000 [ 1151.563978][T13812] lo speed is unknown, defaulting to 1000 [ 1152.385710][ T27] audit: type=1107 audit(1756248449.180:353): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1153.253326][ T4387] Process accounting resumed [ 1154.182737][T13791] BTRFS error (device loop5): open_ctree failed: -12 [ 1154.229049][T13453] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (13453) [ 1159.547057][T13894] loop6: detected capacity change from 0 to 4096 [ 1163.229909][T13919] loop6: detected capacity change from 0 to 764 [ 1163.287692][T13917] rock: directory entry would overflow storage [ 1163.294748][T13917] rock: sig=0x5850, size=36, remaining=7 [ 1164.652160][T13938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2172'. [ 1164.813535][T13858] libceph: connect (1)[c::]:6789 error -101 [ 1164.821870][T13858] libceph: mon0 (1)[c::]:6789 connect error [ 1164.950394][ T27] audit: type=1107 audit(1756248461.700:354): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1165.136237][T13858] libceph: connect (1)[c::]:6789 error -101 [ 1165.148814][T13858] libceph: mon0 (1)[c::]:6789 connect error [ 1165.296686][T13938] ceph: No mds server is up or the cluster is laggy [ 1165.844374][T13860] libceph: connect (1)[c::]:6789 error -101 [ 1165.853251][T13860] libceph: mon0 (1)[c::]:6789 connect error [ 1165.879204][T13952] netlink: 'syz.1.2163': attribute type 10 has an invalid length. [ 1165.949473][T13952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1167.369930][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2167'. [ 1167.889213][T13977] Illegal XDP return value 3899328375 on prog (id 466) dev N/A, expect packet loss! [ 1167.911520][T13977] loop5: detected capacity change from 0 to 1024 [ 1167.918667][T13977] EXT4-fs: Ignoring removed orlov option [ 1167.924483][T13977] EXT4-fs: Ignoring removed i_version option [ 1168.111538][T13985] xt_bpf: check failed: parse error [ 1168.289270][T13977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1168.301569][T13977] EXT4-fs (loop5): unmounting filesystem. [ 1169.961606][T11050] Bluetooth: hci1: command 0x0405 tx timeout [ 1170.129675][T13993] block device autoloading is deprecated and will be removed. [ 1171.076092][T14007] CIFS mount error: No usable UNC path provided in device string! [ 1171.076092][T14007] [ 1171.086310][T14007] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1171.138341][T14007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1171.424747][T14005] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1171.442978][T14005] bridge0: port 3(team0) entered disabled state [ 1171.449981][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.460602][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.119320][ T27] audit: type=1107 audit(1756248469.140:355): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1176.389570][T14047] loop6: detected capacity change from 0 to 128 [ 1176.622177][T14047] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1177.113137][T11075] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1177.222351][T14047] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.333107][T14059] 9pnet_fd: Insufficient options for proto=fd [ 1177.410536][T11075] usb 6-1: device descriptor read/64, error -71 [ 1177.521270][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.527626][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.617826][T14070] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2190'. [ 1179.979734][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 1179.993115][T13056] EXT4-fs (loop6): unmounting filesystem. [ 1183.008750][T14087] (syz.5.2194,14087,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1183.748448][ T27] audit: type=1107 audit(1756248479.910:356): pid=14095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1184.326057][T14109] ptrace attach of "./syz-executor exec"[14110] was attempted by "./syz-executor exec"[14109] [ 1187.309152][T14120] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1187.424292][T14123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1187.434061][T14123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1188.589487][T14147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 1188.929185][T10890] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 1190.220717][T14155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.255410][T14155] device batadv_slave_0 entered promiscuous mode [ 1191.167207][ T27] audit: type=1107 audit(1756248487.480:357): pid=14168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1191.300794][T14162] netlink: 'syz.5.2214': attribute type 11 has an invalid length. [ 1192.668852][T14193] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1197.308272][T14226] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 1197.869097][T14219] wlan0 speed is unknown, defaulting to 1000 [ 1198.116693][T14219] lo speed is unknown, defaulting to 1000 [ 1200.939129][T14236] afs: Unknown parameter '^Kukh/la"/Yvok, priority 0 [ 1426.883841][T16450] wlan0 speed is unknown, defaulting to 1000 [ 1426.890900][T16450] lo speed is unknown, defaulting to 1000 [ 1427.710432][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1428.626091][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1430.505444][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 1431.005270][ T4519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1436.337737][T16523] ipt_REJECT: ECHOREPLY no longer supported. [ 1437.078138][T16515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1437.354260][ T4442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.089044][T16540] loop5: detected capacity change from 0 to 1024 [ 1438.864380][T16540] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1439.786922][ T27] audit: type=1326 audit(1756249248.582:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1441.308035][ T27] audit: type=1326 audit(1756249248.632:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1441.439422][ T27] audit: type=1326 audit(1756249248.912:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1441.523033][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.558884][ T27] audit: type=1326 audit(1756249248.922:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1441.926977][ T27] audit: type=1326 audit(1756249248.922:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1442.240485][ T27] audit: type=1326 audit(1756249248.942:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1444.052298][ T4442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1444.488015][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.496301][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.280084][ T27] audit: type=1326 audit(1756249248.952:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1445.476314][T16590] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2756'. [ 1445.689336][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.495270][ T27] audit: type=1326 audit(1756249248.972:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1447.177835][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.863712][ T27] audit: type=1326 audit(1756249248.982:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1447.970241][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.980901][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.233622][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.778398][ T27] audit: type=1326 audit(1756249249.012:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1448.978504][ T27] audit: type=1326 audit(1756249249.032:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1449.121345][ T27] audit: type=1326 audit(1756249249.052:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.5.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1449.294363][T16617] sctp: [Deprecated]: syz.6.2763 (pid 16617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1449.294363][T16617] Use struct sctp_sack_info instead [ 1449.380632][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.390311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.631318][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.729926][ T27] audit: type=1326 audit(1756249254.332:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16586 comm="syz.5.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1449.763780][ T27] audit: type=1326 audit(1756249254.332:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16586 comm="syz.5.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1450.024511][ T27] audit: type=1326 audit(1756249254.332:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16586 comm="syz.5.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1450.047898][ T27] audit: type=1326 audit(1756249254.342:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16586 comm="syz.5.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1450.158582][ T4504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.220473][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.240616][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.417627][T16634] 9pnet_fd: Insufficient options for proto=fd [ 1451.560983][T16638] loop6: detected capacity change from 0 to 512 [ 1451.603859][T16638] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 1453.537966][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.781489][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.789729][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.150320][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.556227][T14766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.372236][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.380540][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.398164][T10900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.408164][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.439911][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.766444][T16692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.271840][T16692] autofs4:pid:16692:autofs_fill_super: called with bogus options [ 1458.411187][T16690] block device autoloading is deprecated and will be removed. [ 1458.906405][ C0] net_ratelimit: 1132 callbacks suppressed [ 1458.906430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.921995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.930378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.938718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.947243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.955633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.963978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.972399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.980675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.989076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.246037][T16699] loop5: detected capacity change from 0 to 128 [ 1459.298217][T16699] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1459.361778][T16542] udevd[16542]: incorrect jbd checksum on /dev/loop5 [ 1459.375223][T16699] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1460.398828][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1460.398852][ T27] audit: type=1326 audit(1756249268.632:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1460.520962][T16711] loop5: detected capacity change from 0 to 40427 [ 1460.551829][T16711] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1460.559749][T16711] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1460.632532][T16711] F2FS-fs (loop5): invalid crc value [ 1460.696779][T16711] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1460.743328][T16711] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1460.750905][T16711] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1461.000807][ T27] audit: type=1326 audit(1756249268.632:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1461.253956][ T27] audit: type=1326 audit(1756249268.632:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1461.881793][T16731] loop6: detected capacity change from 0 to 1024 [ 1461.952631][ T27] audit: type=1326 audit(1756249268.632:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1461.953158][T16731] EXT4-fs: Ignoring removed mblk_io_submit option [ 1461.975414][ T27] audit: type=1326 audit(1756249268.632:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1462.004847][ T27] audit: type=1326 audit(1756249268.632:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1462.027677][T16731] EXT4-fs: Ignoring removed bh option [ 1462.037862][ T27] audit: type=1326 audit(1756249268.632:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1462.130131][ T27] audit: type=1326 audit(1756249268.642:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1462.153291][T16731] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1462.253763][T16731] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1462.266057][ T27] audit: type=1326 audit(1756249268.642:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1462.310778][T14766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1462.540315][ T27] audit: type=1326 audit(1756249268.642:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f632578ebe9 code=0x7ffc0000 [ 1464.236029][T13860] net_ratelimit: 914 callbacks suppressed [ 1464.236052][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.277028][T16745] autofs4:pid:16745:autofs_fill_super: called with bogus options [ 1464.568415][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.920152][T13860] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1465.513267][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.521907][T13860] usb 6-1: Using ep0 maxpacket: 32 [ 1465.539311][T13860] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1465.560877][T13860] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1465.606918][T13860] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1465.638852][T13860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1465.673376][T13860] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1465.720211][T13860] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1465.773077][T13860] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1465.808876][T13860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.901832][T13860] usb 6-1: config 0 descriptor?? [ 1466.049546][T13056] EXT4-fs (loop6): unmounting filesystem. [ 1466.551651][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.811747][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.886641][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.070554][T14782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1468.081836][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.093580][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.102854][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.675359][T13860] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1468.834930][T16796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.526799][T16804] wlan0 speed is unknown, defaulting to 1000 [ 1469.533897][T16804] lo speed is unknown, defaulting to 1000 [ 1470.257206][T11500] net_ratelimit: 2 callbacks suppressed [ 1470.257228][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.884124][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.300374][T16819] netlink: 'syz.0.2808': attribute type 2 has an invalid length. [ 1471.316685][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.570169][T16822] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2807'. [ 1474.234259][T14782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.235353][T10895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.243906][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.263220][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.364449][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.374639][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.420049][T13859] usb 6-1: USB disconnect, device number 8 [ 1474.433967][T16828] wlan0 speed is unknown, defaulting to 1000 [ 1474.441138][T16828] lo speed is unknown, defaulting to 1000 [ 1474.527402][T13859] usblp0: removed [ 1475.271475][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.700144][T16844] loop6: detected capacity change from 0 to 512 [ 1475.721822][T16844] ext4: Unknown parameter 'fsuuid' [ 1476.416576][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.416576][T16542] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1478.308244][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.326760][T16862] loop5: detected capacity change from 0 to 128 [ 1478.345152][T16862] FAT-fs (loop5): bogus number of reserved sectors [ 1478.351811][T16862] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1478.361238][T16862] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1478.377880][T13857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.474865][T16851] syz.4.2814 (16851) used greatest stack depth: 18176 bytes left [ 1478.616133][T16862] loop5: detected capacity change from 0 to 1024 [ 1478.623770][T16862] EXT4-fs: Ignoring removed nobh option [ 1478.629406][T16862] EXT4-fs: Ignoring removed bh option [ 1478.637686][T16862] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1478.745174][T16862] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1478.994130][T16880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.003866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.013114][T16880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.032246][T16880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.041676][T16880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.054371][T16880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.336675][T12331] EXT4-fs (loop5): unmounting filesystem. [ 1479.590900][T14766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1480.330737][T10900] net_ratelimit: 5 callbacks suppressed [ 1480.330752][T10900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.349564][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.359527][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.540192][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.351112][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.072623][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.110859][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.390804][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.625784][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.722319][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.866967][T16935] sctp: [Deprecated]: syz.6.2829 (pid 16935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1484.866967][T16935] Use struct sctp_sack_info instead [ 1484.900768][T16935] [U] [ 1484.904126][T16935] [U] [ 1484.906846][T16935] [U] [ 1484.909613][T16935] [U] [ 1484.912416][T16935] [U] [ 1484.915102][T16935] [U] [ 1484.917775][T16935] [U] [ 1484.920708][T16935] [U] [ 1484.923523][T16935] [U] [ 1484.926219][T16935] [U] [ 1484.928894][T16935] [U] [ 1484.931574][T16935] [U] [ 1484.934386][T16935] [U] [ 1484.937076][T16935] [U] [ 1484.939762][T16935] [U] [ 1484.942464][T16935] [U] [ 1484.945294][T16935] [U] [ 1484.948008][T16935] [U] [ 1484.950686][T16935] [U] [ 1484.953369][T16935] [U] [ 1484.956518][T16935] [U] [ 1484.959344][T16935] [U] [ 1484.962144][T16935] [U] [ 1484.964820][T16935] [U] [ 1484.967780][T16935] [U] [ 1484.970505][T16935] [U] [ 1484.973197][T16935] [U] [ 1484.975890][T16935] [U] [ 1484.979030][T16935] [U] [ 1484.981749][T16935] [U] [ 1484.984450][T16935] [U] [ 1484.987150][T16935] [U] [ 1484.990206][T16935] [U] [ 1484.992924][T16935] [U] [ 1484.995626][T16935] [U] [ 1484.998330][T16935] [U] [ 1485.001577][T16935] [U] [ 1485.004373][T16935] [U] [ 1485.007053][T16935] [U] [ 1485.009733][T16935] [U] [ 1485.355388][ T4442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1485.443340][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.465431][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.533854][T16928] [U] [ 1485.686164][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.694399][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.957781][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.736708][T13860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.784770][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.084319][T16962] xt_hashlimit: max too large, truncated to 1048576 [ 1489.091620][T16962] No such timeout policy "syz1" [ 1490.194536][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.219503][T16968] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2837'. [ 1490.661304][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 1490.661317][ T27] audit: type=1326 audit(1756249299.462:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.4.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138ebe9 code=0x7ffc0000 [ 1491.086484][ T27] audit: type=1326 audit(1756249299.462:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.4.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138ebe9 code=0x7ffc0000 [ 1491.416088][ T4524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.425272][ T4387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.434016][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.451103][T10900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1491.464734][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.575570][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2839'. [ 1491.611169][T16984] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1492.681192][T11078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.905418][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.463855][ C1] ================================================================== [ 1496.471968][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 1496.479432][ C1] Read of size 2 at addr ffff88807d8e842a by task ksoftirqd/1/21 [ 1496.487148][ C1] [ 1496.489471][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.148-syzkaller #0 [ 1496.497434][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1496.507478][ C1] Call Trace: [ 1496.510750][ C1] [ 1496.513668][ C1] dump_stack_lvl+0x168/0x22e [ 1496.518339][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1496.523362][ C1] ? show_regs_print_info+0x12/0x12 [ 1496.528540][ C1] ? load_image+0x3b0/0x3b0 [ 1496.533033][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1496.538487][ C1] ? __virt_addr_valid+0x188/0x540 [ 1496.543592][ C1] ? __virt_addr_valid+0x465/0x540 [ 1496.548689][ C1] ? rose_timer_expiry+0x470/0x490 [ 1496.553959][ C1] print_report+0xa8/0x210 [ 1496.558365][ C1] kasan_report+0x10b/0x140 [ 1496.562860][ C1] ? rose_timer_expiry+0x470/0x490 [ 1496.567967][ C1] rose_timer_expiry+0x470/0x490 [ 1496.572906][ C1] call_timer_fn+0x1a0/0x670 [ 1496.577480][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1496.582490][ C1] ? call_timer_fn+0xc1/0x670 [ 1496.587148][ C1] ? __run_timers+0x7c0/0x7c0 [ 1496.591811][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1496.597014][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1496.602719][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1496.607733][ C1] __run_timers+0x525/0x7c0 [ 1496.612225][ C1] ? detach_timer+0x350/0x350 [ 1496.616885][ C1] ? lock_chain_count+0x20/0x20 [ 1496.621721][ C1] run_timer_softirq+0x63/0xf0 [ 1496.626530][ C1] handle_softirqs+0x2a1/0x920 [ 1496.631297][ C1] ? run_ksoftirqd+0x98/0xf0 [ 1496.635870][ C1] ? do_softirq+0x200/0x200 [ 1496.640450][ C1] run_ksoftirqd+0x98/0xf0 [ 1496.644874][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1496.650053][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1496.655416][ C1] ? takeover_tasklets+0x800/0x800 [ 1496.660512][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1496.665696][ C1] smpboot_thread_fn+0x64a/0xa40 [ 1496.670623][ C1] ? smpboot_thread_fn+0x4c/0xa40 [ 1496.675668][ C1] kthread+0x29d/0x330 [ 1496.679836][ C1] ? cpu_report_death+0x230/0x230 [ 1496.685076][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1496.689764][ C1] ret_from_fork+0x1f/0x30 [ 1496.694202][ C1] [ 1496.697222][ C1] [ 1496.699593][ C1] Allocated by task 15: [ 1496.703779][ C1] kasan_set_track+0x4b/0x70 [ 1496.708366][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1496.712951][ C1] __kmalloc_node_track_caller+0xae/0x230 [ 1496.718662][ C1] __alloc_skb+0x22a/0x7e0 [ 1496.723070][ C1] alloc_skb_with_frags+0xa7/0x710 [ 1496.728547][ C1] sock_alloc_send_pskb+0x853/0x980 [ 1496.733741][ C1] __ip_append_data+0x253c/0x3760 [ 1496.738842][ C1] ip_append_data+0x132/0x1a0 [ 1496.743507][ C1] icmp_push_reply+0x86/0x400 [ 1496.748171][ C1] __icmp_send+0xfbb/0x1320 [ 1496.752655][ C1] ip_protocol_deliver_rcu+0x6d9/0x780 [ 1496.758108][ C1] ip_local_deliver_finish+0x2c7/0x510 [ 1496.763555][ C1] NF_HOOK+0x2ff/0x390 [ 1496.767611][ C1] NF_HOOK+0x2ff/0x390 [ 1496.771666][ C1] __netif_receive_skb+0xcc/0x290 [ 1496.776674][ C1] process_backlog+0x37c/0x6e0 [ 1496.781473][ C1] __napi_poll+0xc0/0x460 [ 1496.785784][ C1] net_rx_action+0x5b1/0xad0 [ 1496.790358][ C1] handle_softirqs+0x2a1/0x920 [ 1496.795107][ C1] run_ksoftirqd+0x98/0xf0 [ 1496.799501][ C1] smpboot_thread_fn+0x64a/0xa40 [ 1496.804422][ C1] kthread+0x29d/0x330 [ 1496.808473][ C1] ret_from_fork+0x1f/0x30 [ 1496.812873][ C1] [ 1496.815187][ C1] Last potentially related work creation: [ 1496.820879][ C1] kasan_save_stack+0x3a/0x60 [ 1496.825578][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 1496.830951][ C1] insert_work+0x54/0x3c0 [ 1496.835265][ C1] __queue_work+0xba3/0xfb0 [ 1496.839756][ C1] call_timer_fn+0x1a0/0x670 [ 1496.844412][ C1] __run_timers+0x550/0x7c0 [ 1496.848895][ C1] run_timer_softirq+0x63/0xf0 [ 1496.853781][ C1] handle_softirqs+0x2a1/0x920 [ 1496.858532][ C1] run_ksoftirqd+0x98/0xf0 [ 1496.863134][ C1] smpboot_thread_fn+0x64a/0xa40 [ 1496.868142][ C1] kthread+0x29d/0x330 [ 1496.872226][ C1] ret_from_fork+0x1f/0x30 [ 1496.876658][ C1] [ 1496.879019][ C1] The buggy address belongs to the object at ffff88807d8e8400 [ 1496.879019][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1496.893082][ C1] The buggy address is located 42 bytes inside of [ 1496.893082][ C1] 512-byte region [ffff88807d8e8400, ffff88807d8e8600) [ 1496.906371][ C1] [ 1496.908691][ C1] The buggy address belongs to the physical page: [ 1496.915098][ C1] page:ffffea0001f63a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807d8eb800 pfn:0x7d8e8 [ 1496.926647][ C1] head:ffffea0001f63a00 order:2 compound_mapcount:0 compound_pincount:0 [ 1496.934978][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1496.943001][ C1] raw: 00fff00000010200 ffffea00009e9e08 ffffea0001560708 ffff888017441c80 [ 1496.951663][ C1] raw: ffff88807d8eb800 0000000000100007 00000001ffffffff 0000000000000000 [ 1496.960229][ C1] page dumped because: kasan: bad access detected [ 1496.966662][ C1] page_owner tracks the page as allocated [ 1496.972374][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4266, tgid 4266 (syz-executor), ts 70233564613, free_ts 68740478087 [ 1496.995132][ C1] post_alloc_hook+0x173/0x1a0 [ 1496.999901][ C1] get_page_from_freelist+0x1a26/0x1ac0 [ 1497.005438][ C1] __alloc_pages+0x1df/0x4e0 [ 1497.010105][ C1] alloc_slab_page+0x5d/0x160 [ 1497.014793][ C1] new_slab+0x87/0x2c0 [ 1497.018845][ C1] ___slab_alloc+0xbc6/0x1220 [ 1497.023605][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 1497.029053][ C1] __kmalloc_node_track_caller+0x9e/0x230 [ 1497.034820][ C1] __alloc_skb+0x22a/0x7e0 [ 1497.039339][ C1] netlink_ack+0x372/0x1100 [ 1497.043849][ C1] netlink_rcv_skb+0x263/0x420 [ 1497.048621][ C1] netlink_unicast+0x74d/0x8d0 [ 1497.053485][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1497.058248][ C1] __sys_sendto+0x44f/0x5c0 [ 1497.062735][ C1] __x64_sys_sendto+0xda/0xf0 [ 1497.067861][ C1] do_syscall_64+0x4c/0xa0 [ 1497.072264][ C1] page last free stack trace: [ 1497.076936][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 1497.082453][ C1] free_unref_page+0x2e/0x3f0 [ 1497.087129][ C1] qlist_free_all+0x76/0xe0 [ 1497.091624][ C1] kasan_quarantine_reduce+0x144/0x160 [ 1497.097074][ C1] __kasan_slab_alloc+0x1e/0x80 [ 1497.101914][ C1] slab_post_alloc_hook+0x4b/0x480 [ 1497.107013][ C1] kmem_cache_alloc_lru+0x11a/0x2e0 [ 1497.112199][ C1] sock_alloc_inode+0x24/0xc0 [ 1497.116961][ C1] new_inode_pseudo+0x5f/0x1c0 [ 1497.121838][ C1] __sock_create+0x129/0x940 [ 1497.126605][ C1] __sys_socket+0xc4/0x190 [ 1497.131011][ C1] __x64_sys_socket+0x76/0x80 [ 1497.135672][ C1] do_syscall_64+0x4c/0xa0 [ 1497.140160][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.146136][ C1] [ 1497.148458][ C1] Memory state around the buggy address: [ 1497.154158][ C1] ffff88807d8e8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1497.162364][ C1] ffff88807d8e8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1497.170601][ C1] >ffff88807d8e8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1497.178940][ C1] ^ [ 1497.184492][ C1] ffff88807d8e8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1497.192692][ C1] ffff88807d8e8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1497.201175][ C1] ================================================================== [ 1497.213532][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1497.220983][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.148-syzkaller #0 [ 1497.228979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1497.239189][ C1] Call Trace: [ 1497.242487][ C1] [ 1497.245529][ C1] dump_stack_lvl+0x168/0x22e [ 1497.250925][ C1] ? memcpy+0x3c/0x60 [ 1497.255376][ C1] ? show_regs_print_info+0x12/0x12 [ 1497.260607][ C1] ? load_image+0x3b0/0x3b0 [ 1497.265157][ C1] panic+0x2c9/0x710 [ 1497.269066][ C1] ? asm_common_interrupt+0x22/0x40 [ 1497.274289][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1497.278819][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1497.284830][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1497.290842][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1497.295709][ C1] check_panic_on_warn+0x80/0xa0 [ 1497.300745][ C1] ? rose_timer_expiry+0x470/0x490 [ 1497.305876][ C1] end_report+0x66/0x110 [ 1497.310214][ C1] kasan_report+0x118/0x140 [ 1497.314743][ C1] ? rose_timer_expiry+0x470/0x490 [ 1497.319965][ C1] rose_timer_expiry+0x470/0x490 [ 1497.324977][ C1] call_timer_fn+0x1a0/0x670 [ 1497.330021][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1497.335086][ C1] ? call_timer_fn+0xc1/0x670 [ 1497.339774][ C1] ? __run_timers+0x7c0/0x7c0 [ 1497.344560][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1497.349777][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1497.355076][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1497.360099][ C1] __run_timers+0x525/0x7c0 [ 1497.364592][ C1] ? detach_timer+0x350/0x350 [ 1497.369265][ C1] ? lock_chain_count+0x20/0x20 [ 1497.374116][ C1] run_timer_softirq+0x63/0xf0 [ 1497.378909][ C1] handle_softirqs+0x2a1/0x920 [ 1497.383784][ C1] ? run_ksoftirqd+0x98/0xf0 [ 1497.388732][ C1] ? do_softirq+0x200/0x200 [ 1497.393241][ C1] run_ksoftirqd+0x98/0xf0 [ 1497.397746][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1497.403060][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1497.408458][ C1] ? takeover_tasklets+0x800/0x800 [ 1497.413933][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1497.419226][ C1] smpboot_thread_fn+0x64a/0xa40 [ 1497.424163][ C1] ? smpboot_thread_fn+0x4c/0xa40 [ 1497.429283][ C1] kthread+0x29d/0x330 [ 1497.433362][ C1] ? cpu_report_death+0x230/0x230 [ 1497.438398][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1497.442988][ C1] ret_from_fork+0x1f/0x30 [ 1497.447423][ C1] [ 1497.450837][ C1] Kernel Offset: disabled [ 1497.455269][ C1] Rebooting in 86400 seconds..